What are the data breach notification laws in New Zealand?

New Zealand's Privacy Act 2020 introduces the Privacy Breach Notification regime, requiring organizations to notify the Office of the Privacy Commissioner (OPC) and affected individuals of privacy breaches that pose a risk of causing harm. This includes loss of personal data, unauthorized access, or unauthorized disclosure. An assessment must be conducted promptly to determine if a breach is likely to cause harm. Notifications should detail the nature of the breach, the type of information involved, and recommended actions for individuals. Engaging with our data privacy experts can assist businesses in understanding their obligations and effectively managing privacy breaches.