New Zealand's Privacy Act 2020 replaced the 1993 Act and brought in mandatory breach notification and clearer rules on sending data overseas. It is built around the Information Privacy Principles and overseen by the Office of the Privacy Commissioner. This is a plain-English overview, not legal advice.
The Act sets out Information Privacy Principles covering how you collect, store, use and disclose personal information. The themes are familiar: collect only what you need, be open about why, keep it secure, and let people see and correct their own information.
For a website, that translates into a clear privacy statement, honest collection notices, and proper security.
A significant change in 2020 was mandatory reporting of privacy breaches that are likely to cause serious harm. If that bar is met, you must notify the Privacy Commissioner and the affected people as soon as practicable. The Commissioner provides an online tool to help assess and report.
Keeping a simple record of what data you hold makes this far easier if it ever happens.
The Act limits sending personal information to overseas parties unless the information will be protected by comparable safeguards. If your hosting or services sit offshore, you need reasonable assurance the data stays protected to a similar standard.
Hosting close to home, or with providers that meet comparable standards, keeps this straightforward.
HostBible includes SSL and daily backups on every plan, so protecting personal information starts on solid ground.
View Hosting Plans