Service

Privacy and Data Protection

Summary

Privacy compliance is a growing issue faced by many companies as a result of a global push to strengthen the privacy rights of individuals. We assist a wide range of our clients to design and deploy compliant privacy policies and procedures. We also advise on all matters relating to privacy and data protection compliance, including handling personal information legally and responsibly under New Zealand’s Privacy Act 2020 and other laws, such consumer protection and antispam laws.

Key services

Governance and compliance

Assisting clients to undertake privacy impact assessments, to design and implement policies and procedures relating to customer or employee data, to respond to requests or issues raised by data subjects, and to understand more complex areas of privacy law. Developing privacy-compliance programmes, advising on data protection undertakings and information assurance programmes, and analysing data processing arrangements against applicable privacy laws.

Breaches and enforcement

Advising clients on how to handle data breach incidents, including notifying relevant authorities and data subjects, managing investigations and remediation actions, and defending against potential enforcement actions or claims by regulators or individuals.

Cybersecurity

Helping clients to protect their data and systems from cyber threats, comply with relevant security standards and regulations, and respond effectively to cyber incidents or claims arising from cyberattacks.

Key people

Mark Gavin

Partner

Work Highlights

Assisting an international warehousing and transportation company with ransomware attacks with release of information into the dark web in 2023 and managing its reporting requirements in New Zealand.
Assisting an Australasian retail and financial services business group with ransomware attacks with release of information into the dark web in 2023/2024 and their reporting requirements to the New Zealand Office of the Privacy Commissioner and affected New Zealand individuals.
Assisting a client with the sensitive management of a family matter and an alleged privacy breach.
Advising various companies including retirement villages and automotive manufacturers on the use of technology in workplaces and products and associated privacy considerations.

Related insights