New Zealand



The Office of the Privacy Commissioner

Netsafe (the approved agency under the Harmful Digital Communications legislation)

The Department of Internal Affairs (which administers spam legislation)

Inspector General of Intelligence and Security

Broadcasting Standards Authority

New Zealand Media Council

Links to legislation

Privacy Act 2020

Harmful Digital Communications Act 2015

Intelligence and Security Act 2017

Unsolicited Electronic Messages Act 2007

Broadcasting Standard 10 (Privacy)


Review of NZSIS use of CCTV: a report by the Inspector-General of Intelligence and Security on the New Zealand Security Intelligence Service’s access to, and use of, closed circuit television

Ministerial Policy Statement – Conducting surveillance in a public place: guidance to the GCSB and NZSIS on the conduct of surveillance in a public place



Digital platforms for communication and information sharing: A resource, prepared by the Children’s Privacy working group, on privacy points that should be considered when using digital technologies in education

Contact Tracing – APProaching the Future: A commentary piece, from a privacy perspective, on Dr Ayesha Verrall’s audit report on contract tracing for COVID-19 in New Zealand

Zoom: How to Keep Uninvited Guests Out of Your Zoom Event

AdTech: Information on what AdTech is and why it matters to our privacy.

Age appropriate design: A code of practice for online services.

CERT NZ Protecting your privacy online: Protecting your privacy online means you have more control over where your personal information goes and who has access to it.

Privacy Act Guidance for Landlords and Tenants: A guide to the Privacy Act for landlords and tenants.

Privacy guidelines for Kiwi landlords and tenants: A blog on privacy guidelines for both landlords and tenants.

Get Ready for Upcoming Privacy Law Changes: A guide to help you prepare for the changes to the Privacy Act that will come into effect as a result of the new Privacy Bill.

Privacy and CCTV: A guide to the Privacy Act for businesses, agencies and organisations

PFNZ Position Paper on Privacy Act 2020

Digital Crossroads: The Intersection of Competition Law and Data Privacy

Artificial intelligence: the opinion of the CNIL and its counterparts on the future European regulation

Best interests of the child self-assessment: Tools, templates and guidance for performing a self-assessment into whether your online service treats the best interests of children as a primary consideration.



Patient Privacy & Information Sharing: this presentation was given by Paul Holmes, on behalf of the Privacy Foundation, at the Medico-Legal Congress 2021 held in Wellington on 26th and 27th July.

Paul is a member of the Privacy Foundation and Managing Director of INFO by Design.

The topic for the presentation was:

Patient Privacy and Information Sharing 

  • Updating the Health and Information Privacy Code 2020 to align with the Privacy Act 2020 
  • Orienting privacy legislation to accommodate for developments in technology 
  • How these changes influence medical information governance and practices 

The presentation was developed in collaboration with the Privacy Foundation’s Health Care and Policy Working Group.

Māori Data Sovereignty: Aotearoa’s contribution to global data privacy?:
Privacy Foundation committee member, Gehan Gunasekara, gave this presentation, which examines Māori Data Sovereignty from the standpoint of data privacy. The presentation was held at the University of Auckland’s Sir Owen G Glenn Building on 10 May 2022. Please see the link above to view a recording of the presentation and for details about the topics covered.



Runaway Technology: Can law keep up?: an interview on RNZ’s Nine To Noon podcast with Joshua Fairfield, a Washington and Lee University School of Law professor and author of “Runaway Technology: Can Law keep up?”, about how and why the law should keep pace with innovation in the age of Big Tech.

Microsoft gets tough on AI [16.05]: a discussion on RNZ’s Nine To Noon podcast about companies, such as Microsoft, reigning in their AI ethics policies and restricting usage of their AI-based services in an attempt to self-regulate.

Facial recognition’s creep into commercial spaces – are we ready?: interviews on RNZ’s Nine to Noon podcast with Madeline Newman, executive director of the AI Forum NZ, and Dr Dennis Desmond, a lecturer at the University of the Sunshine Coast, regarding the use of facial recognition for retail loss prevention.



Due to the rapidly changing situation this resource list principally provides links to other resource pages that are periodically updated rather than individual documents.

New Zealand public service resource pages:

Unite against COVID-19:

Ministry of Health:

Rapid Audit of Contact Tracing for COVID-19 in New Zealand (Ministry of Health):

Office of the Privacy Commissioner:

NZ COVID Tracer app Privacy Impact Assessment: 

Final Report on the Contact Tracing System:

Inquiry into Ministry of Health disclosure of Covid-19 Patient Information:

Response to the Health Care and Policy working group’s Official Information Request regarding the privacy implications in regards to contact tracing technology:

Overseas resources

VUB Law, Science, Technology & Society Research group – Data Protection and the Covid-19 Outbreak:

Global Privacy Assembly – Data protection and Coronavirus (COVID-19) resources:

Privacy International – Tracking the global response to COVID-19:

International Association of Privacy Professionals – COVID-19 Guidance
and resources:

European Commission – Guidance on Apps supporting the fight against COVID 19 pandemic in relation to data protection:

Suggestions by data privacy professionals and academics for drafting good legislation for contact tracing app: Good legislation to make COVIDSafe trustworthy

UN Global Pulse COVID-19 Data Protection and Privacy Resources