A reminder that the 2020 Privacy Act has come into force as of this week (December 1st, 2020).
Some of the key changes will have an impact on all organisations is that any privacy breach that has ‘serious harm’ must legally be reported to the Office of the privacy commission.
There are also changes to information disclosures – individuals must be notified if there is a risk:
“A new privacy principle 12 has been added to the Privacy Act to regulate the way personal information can be sent overseas. Under principle 12, an organisation or business may only disclose personal information to an agency outside of New Zealand if the receiving agency is subject to similar safeguards to those in the Privacy Act.
If a jurisdiction does not offer similar protections, the individual concerned must be fully informed that their information may not be adequately protected and they must expressly authorise the disclosure.”
Please be assured Primary IT has put in place processes to ensure we are meeting the obligations of the new Privacy Act. If you have any questions for us – please reach out.