Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

down arrow
Privacy breach homepage

Make a privacy complaint

We're keen to work with New Zealanders to get their privacy queries and complaints sorted quickly and fairly. Before you complain to us, you need to complain directly to the business or organisation that you feel has breached your privacy.

If you haven’t been able to work out your privacy issue with them, then you can complain to us. We aim to ensure that you're treated fairly, whatever your background or circumstances. We work in accordance with the Human Rights Act 1993.

We review all the complaints we receive. If we can resolve them quickly, we will. If your case requires a complicated or comprehensive investigation, then owing to high volumes, the wait time for an investigator is up to six months.

Agencies: report a data breach

If you're an organisation and have a privacy breach that is likely to cause anyone serious harm, you are legally required to notify us and any affected persons as soon as you can.

As a guide, our expectation is that a breach notification should be made to our Office no later than 72 hours after agencies are aware of a notifiable privacy breach. Work out whether you need to notify us.

How long is 72 hours(external link)?

Do I need to notify my privacy breach(external link)?

police photos

Police well on the way to compliance; one critical step remains

Police have completed all but one of the original requirements that were set out in a Compliance Notice issued by OPC in December 2021(external link)

The notice was issued to require Police to stop unlawfully collecting photographs and biometric prints from members of the public, particularly young people, and to delete unlawfully collected material stored on their systems, including mobile phones.

Privacy Commissioner Michael Webster says, “I’d like to acknowledge the significant work Police has done in the past two years to complete most of the notice requirements.

“I know from their regular reporting that they’ve improved training and now have procedures and policies that help officers understand how sensitive these photos are.

Read our media release of 17 October(external link).

supermarket

Commissioner's update on facial recognition technology

Privacy Commissioner Michael Webster is now evaluating the results of Foodstuff North Island’s trial of Facial Recognition Technology (FRT) to better understand its privacy impacts and compliance with the Privacy Act.

The Commissioner announced his Inquiry into FRT use in 25 supermarkets in April this year after Foodstuffs North Island sought to use FRT to help reduce retail crime.

Read his 25 September 2024 statement(external link).

elearning homepage image

Use our free e-learning tools

We can help you and your workmates learn about privacy, or sharpen your skills with our free e-learning tools. There are 10 free courses to choose from, and they are all run as online learning modules. Learn at your own pace and receive a certificate of completion.

Topics range from Privacy 101 to specialist topics like health and education. You can learn more about reporting privacy breaches, approved information sharing agreements (AISA) and more.

Get learning with our e-learning modules(external link).