Office of the Privacy Commissioner | New on the website
Most recently edited pages
Displaying 1 - 10 of 24
Corporate
Information about the personal information we collect during recruitment, responding to Official Information Act requests, and when managing complaints made about us.
Case Note 329928 [2026] NZ Priv CMR 1: Personal emails sent from work email address “held” by Employer
A woman made an information request to her employer under principle 6 of the Privacy Act, and some information was withheld.
Privacy Commissioner sets expectations about smart glasses
Smart glasses are one of the latest technological developments exciting consumers, but they have significant privacy considerations.
Privacy Commissioner statement on under-16s social media ban
Privacy Commissioner Michael Webster has said that online harm is real and serious, and careful consideration and consultation is needed...
Statement of Performance Expectations
The Statement of Performance Expectations (SPE) describes our intended financial and non-financial performance during the financial year (1 July - 30 June). Publishing a Statement of…
Statement of Intent
A Statement of Intent (SoI) is an outline of what we're going to do over a short period of time. Here we map out our business…
Privacy at the 2026 General Election
The 2026 General Election is coming up on 7 November 2026, and an important part of the democratic process is keeping people, their information, and votes…
What’s the difference between a privacy statement, notice and policy?
Agencies need to be transparent about what personal information they’re collecting and how they will use it under the Privacy Act 2020.
Breach legal professional privilege
This content was updated in June 2026.
Executive summary: Inquiry into the cyber security breach affecting the Manage My Health Limited patient portal
On 1 January 2026, Manage My Health Limited notified the Office of the Privacy Commissioner that threat actors had managed to steal large amounts of health info