Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site and how to opt out.

We respect your Do Not Track preference.

Response calculator for access and correction requests

Use this calculator to work out the latest date (usually 20 working days) by when an agency must respond to you if you make a request to access or correct your personal information.

The Privacy Act 2020 came into effect on 1 December 2020. The Act introduces a number of new privacy protections for individuals and obligations for organisations, including mandatory privacy breach notifications, access directions, and compliance notices. This video introduces some of these key changes.

New on the website

First AML awarded Privacy Trust Mark

Privacy Commissioner John Edwards has awarded a Privacy Trust Mark to First AML’s customer due diligence platform.

Annual Report of the Privacy Commissioner 2020

View and download a copy of the Privacy Commissioner's Annual Report for the year ending 30 June 2020.

Filing a claim in the Human Rights Review Tribunal

Under the Privacy Act 2020, you have 6 months to file a claim in the Human Rights Review Tribunal. Read more about the requirements for filing a privacy claim in the Tribunal.

Featured items

Report privacy breaches online

NotifyUs

Under the Privacy Act 2020, if your organisation has a privacy breach that is likely to cause anyone serious harm, it is legally required to notify us and any affected people as soon as it is practicably able to. 

NotifyUs is our online tool that can help you work out if a privacy breach is notifiable and report it to us.

Privacy Breach Reporting e-learning module

Free online privacy education

Our new Privacy Breach Reporting e-learning module is now available at elearning.privacy.org.nz.

This module will help you understand what should be done to reduce the risk of privacy breaches and how to manage privacy breaches if they do occur. It also covers the requirement to notify the Privacy Commissioner of privacy breaches that have caused or are likely to cause serious harm.