The health sector reports more serious privacy breaches than any other area even though under-reporting continues to occur. Frustratingly, many of those breaches occurred when the underlying issue had been, or should have been, identified and acted on earlier. We explain why more internal privacy breach reporting is needed in the health sector and ways to avoid privacy breaches from occurring.

Key themes of this analysis:

Updated on 01/02/2023: to include further information on the High Court’s second decision regarding the disclosure of Māori vaccination information”. 

If you’re reading this on your phone, you may have unlocked your device using your face or fingerprint. If so, you’re one of a growing number of people who regularly interact with biometric technologies.

Technology developments can be challenging to privacy laws. We all know our phones are powerhouses of data collection, and that our data is the key asset for big tech. But we don’t always know what data is being collected, nor how it is being used.

Today John Edwards, New Zealand’s Privacy Commissioner, has been announced as the preferred candidate for the role of the UK’s Information Commissioner.

Under the Privacy Act, the Human Rights Review Tribunal (“the Tribunal”) can award damages for emotional harm caused by a privacy breach. Damages are compensatory rather than punitive; the goal is to compensate individuals for specific harm rather than punish a defendant’s bad behaviour.

The Government has announced new legislation outlining workplace vaccination requirements, taking the next step in stopping the spread of COVID-19. This legislation will change the circumstances when workplaces can ask about a person’s vaccination status. Please visit Employment.govt.nz for the latest information. (Updated November 3)