InternetNZ says the Privacy Bill is a good start, but New Zealand can do better
InternetNZ says the Privacy Bill currently in front of a select committee is a good start to revamping the Privacy Act, but it needs to go even further to be fit for the internet age.
Justice Minister Andrew Little says the Privacy Bill is designed "to promote and protect people's privacy and to give them confidence that their personal information is properly protected."
InternetNZ chief executive Jordan Carter says privacy matters more than ever in the age of big data and ubiquitous internet, but improvements are needed to keep privacy up to date.
"Privacy is an essential human right and the online world has brought many changes and challenges to how privacy works in the Internet age. This much-needed upgrade to our privacy law will help make our law fit for this decade and beyond," Carter says.
InternetNZ adds that "The new Privacy Bill regulates the collection, use, and disclosure of information about individuals and has retained the Act's 12 information privacy principles."
Proposed changes include mandatory data breach disclosure with up to $10,000 fines for non-compliance, and the provisioning of more powers to the Privacy Commissioner.
Submissions on the Bill closed on May 24. Both the Office of the Privacy Commissioner and InternetNZ have made their submissions publicly available.
"We support the changes in the Bill but have also suggested some adjustments to make them more effective," Carter says.
"Our submission introduces several new initiatives that are in part aimed at tackling developments since the Law Commission's 2011 report, on which this Bill is based."
InternetNZ has suggested a number of changes, including:
Adapting ideas from the Europe's GDPR and incorporating these where they make sense
Aligning Data breach notification rules to those of the EU and Australia
Giving New Zealanders a new right to know the purpose for which information is being held, as well as existing rights to the information itself (the 'why' as well as the 'what').
"With Europe's General Data Protection Regulation (GDPR) in effect, and changing privacy standards around the world, now is the right time for New Zealand to update our own privacy protections." says Carter.
"We would like to see Parliament get our Privacy Law fit for purpose and to see Select Committee take additional submissions on further reforms.
"We would support a later report-back of this Bill, and an additional consultation period, to support that outcome.
Read our previous coverage of the Privacy Bill proceedings here:
Parliament supports NZ's Privacy Bill during first reading
New Zealand's Privacy Bill to get first reading in Parliament
Privacy Bill may limit breach fines to $10,000
A/NZ organisations slack in Notifiable Data Breach scheme
Two top execs' predictions for cybersecurity in 2019
NZ urgently needs to get the Privacy Bill right for everyone's sake, says InternetNZ
New Zealand's first Privacy Trust Marks awarded to Trade Me and RealMe
Mandatory Data Breach laws
Privacy Bill
Using UEBA to fight user-based threats internally
This whitepaper uncovers how User and Entity Behaviour Analytics (UEBA) reduces your organisational risk and enables you to respond more quickly to attacks.More
IT and operational technology (OT) are on a journey to convergence, but that convergence must be managed with caution in order to manage cybersecurity risks that go with it. More