Insights & Articles

Legislative gap leaves New Zealand exposed to deepfakes. The march of technology means almost anyone can create deepfakes, often in a matter of minutes.

The Privacy Act 2020 ("new Act") came into force in 2020, replacing the Privacy Act 1993. The purpose of the new Act was to overhaul New Zealand's existing privacy of personal information regulatory framework and bring it into line with internationally recognised privacy obligations and standards. Section 22 of the new Act sets out 13 information privacy principles ("Privacy Principles"). In this article, we focus on new developments in relation to Privacy Principle 1 ("PP1"), which addresses the purpose of collection of personal information.

In a world that is placing an increasing reliance on technology and value in data, it is hardly surprising that New Zealand's outdated Privacy Act 1993 ("Act") is scheduled to be replaced on 1 December 2020 in its entirety by the Privacy Bill ("Bill") which is currently making its way through the final stages of Parliament.

The General Data Protection Regulation (GDPR) came into force on 25 May 2018. Even though this is a European Union regulation, it potentially has significant implications for New Zealand businesses. Technology has enabled New Zealand businesses to operate on a truly global scale and businesses collect, process and use data from all corners of the world.