--- title: New Zealand's Privacy Act 2020 Now in Effect description: After passing through parliament in June 2020, New Zealand's Privacy Act 2020 came into effect on December 1. image: https://insights.comforte.com/hubfs/blog%20new%20zealand%20privacy%20act.jpeg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![New Zealand Privacy Act 2020](https://insights.comforte.com/hubfs/blog%20new%20zealand%20privacy%20act.jpeg)](https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect) [Dan Simmons](https://insights.comforte.com/author/dan-simmons) l Feb 9, 2021 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Compliance](https://insights.comforte.com/tag/compliance), [Asia-Pacific](https://insights.comforte.com/tag/asia-pacific) # New Zealand's Privacy Act 2020 Now in Effect On December 1, 2020, updates to New Zealand's data privacy laws came into force, replacing the previously established 1993 Privacy Act. The new Privacy Act 2020 is a modern adaptation of the previous law and includes amendments that bring about stricter data protection rules that organizations "carrying on business in New Zealand" must follow, even if they don't have a physical presence in the country. Notable changes include: - Mandatory data breach notification is required immediately if there is a risk of harm, including data leaked from an organization or public body, when used in identity theft, or when accidentally posted on the internet. - New investigative and regulatory powers for the New Zealand Privacy Commissioner. ## Extraterritorial applicability The law must be abided by any organization that handles, collects, or stores information pertaining to New Zealand citizens, regardless of where the business operates. This law also includes overseas service providers. Moreover, the transfer of personal information abroad is only allowed if the country to which the data is being sent has privacy laws that are on par with New Zealand’s. ## How to report a breach Part of complying with the rejuvenated privacy act means that organizations are expected to employ privacy officers who will be responsible for reporting the breach to the authorities. The New Zealand government has created [a ‘NotifyUs’ tool](https://www.privacy.org.nz/responsibilities/privacy-breaches/notify-us/), which is a source of information and a guideline for organizations on whether a breach needs to be reported and how to do so. ## Penalties Failure to comply with certain provisions of New Zealand’s Privacy Act may be deemed criminal offenses and result in fines of up to 10,000 NZD ([approx. 7,000 USD as of Feb 2021](https://www.xe.com/currencyconverter/convert/?Amount=10000&From=NZD&To=USD)). Additionally, individuals as well as classes of individuals who are affected by breaches can issue complaints to the Human Rights Review Tribunal which may result in damages being awarded to each aggrieved individual.  ## How does the Privacy Act 2020 compare to other privacy laws? [More and more jurisdictions](https://insights.comforte.com/13-countries-with-gdpr-like-data-privacy-laws?hsLang=en) are beginning to acknowledge data privacy as a human right, and these developments showcase New Zealand’s determination to deploy data privacy laws and standards that are more in line with other global regulations like GDPR in Europe, the Digital Charter Act in Canada, CCPA in the US, and Brazil’s LGPD. While the New Zealand Privacy Act 2020 is not as onerous as other internationally recognized data privacy standards, it is an indicator that New Zealand is taking a forward-thinking approach to data security and privacy which does include components that can be found within the aforementioned data privacy regulations. The implementation of the Privacy Act should be a reminder for organizations to have the appropriate data security and privacy controls in place to protect data throughout its lifecycle and wherever it resides. Compliance shouldn’t be an afterthought and nor should data security and organizations will benefit from adopting data-centric security methods that can provide cross-regulatory compliance. --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/new-zealands-privacy-act-2020-now-in-effect&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## There can be no data privacy without data protection.  Data privacy can't be guaranteed without robust data protection, but how do you decide which method fits your use case? Check out our eBook "Data-centric Protection Explained" to learn more about various data protection methods and how they work, where they work best, and how to implement them. [![data protection methods](https://no-cache.hubspot.com/cta/default/4026697/062b88a2-940b-42a9-bac4-655fd6e23405.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/062b88a2-940b-42a9-bac4-655fd6e23405) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026