Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

Benchmarking against international privacy peers Blair Stewart
20 August 2017 at 18:00

It can be useful to compare an organisation’s processes or performance against another one’s competitors in the same industry class. It is especially useful to compare with the ‘best in class’ and set targets to meet or exceed the industry norms. This is sometimes called ‘best practice benchmarking’ and is an important tool to support continuous improvement.

Trusted Sharing Consultancy update Abigail Vink
18 August 2017 at 09:43

In late 2016, the Privacy Commissioner launched the Trusted Sharing Consultancy Service, to offer advice and support to ensure government agencies achieve their aspirations for the coordinated delivery of public services while protecting privacy.

More privacy authorities online than ever Blair Stewart
17 August 2017 at 16:53

When the Office of the Privacy Commissioner launched its website in 1995, very few government organisations in New Zealand had an online presence. The Encyclopedia of New Zealand, Te Ara, tells us that the first New Zealand website was created only in 1992.

Breach Case 5: Taking client files offsite Neil Sanson
4 August 2017 at 15:04

You keep your home safe, don’t you? So there should be no problem taking some work notes home, rather than travel the extra distance to drop them off at the office at the end of the day; or to have to pick them up in the morning at the office. You are saving time and avoiding unnecessary travel. But homes do get burgled, thousands in any month.

If you spot a security flaw, tell CERT NZ Neil Sanson
4 August 2017 at 11:36

Computer systems always seem to have problems and vulnerabilities. Some data breaches occur because of those vulnerabilities. If you spot a vulnerability or security flaw in a website, you can first report it to the organisation. They are generally happy to hear about a problem, so they can fix it.

How much can I charge for information? Sam Grover
4 August 2017 at 09:17

Charging for information is a subject that comes up in complaints made to us from time to time.

When governments get data protection wrong Charles Mabbett
2 August 2017 at 13:01

“I’m from the government and I’m here to help.” The former US President Ronald Reagan famously said these were the “nine most terrible words in the English language” that anyone could expect to hear.

Williams v ACC: Getting the information right Jane Foster
25 July 2017 at 15:54

A recent Human Rights Review Tribunal decision has highlighted the importance of agencies complying with privacy principle 8 (the accuracy principle) and ensuring they take reasonable steps to ensure the information is accurate and up-to-date before they use it.