One of the key changes in the Privacy Bill is a new privacy principle 12.

Audiences in Auckland and Wellington were given a comprehensive overview of how the European Union’s General Data Protection Regulation (GDPR) was working after two years. The messages were particularly instructive because the speaker came from the European oversight body tasked with coordinating how the GDPR is being applied across the EU’s 27 member states.

Nearly 40 years ago, the human rights body, the Council of Europe, introduced Convention 108. It required all signatory nations to take the necessary steps in their domestic legislation to ensure that fundamental human rights would be respected in the processing of personal information.

Day Three of the International Conference of Data Protection and Privacy Commissioners (ICDPPC) marks the beginning of the so-called “Open Session”. The openness reflects the conference welcoming attendees from industry, academia, civil society and human rights institutions.

Where better to discuss the important issue of regulatory cooperation and data protection than in Tirana, Albania? This was the location of the 41st International Conference of Data Protection and Privacy Commissioners (ICDPPC) which took place on 21 – 24 October 2019.

Last year the OECD did a survey* of budget changes in ‘privacy enforcement authorities’. It was revealing. I was taken aback when I saw where New Zealand sat in relation to our most commonly compared OECD economies.

The annual Global Privacy Enforcement Network (GPEN) Privacy Sweep is about to get underway and the theme is data breach notifications.

One of the most pervasive and persistent problems of privacy and data protection in the digital age is how to move the burden from consumers to read terms and conditions for services they are using, to the service providers to ensure they are clearly explaining the choices that consumers have, and the consequences for them.