Get in touch O’Brien Legal insights
Practical analysis of privacy, data, AI, biometrics and the legal developments shaping New Zealand organisations.
Explore by topic
Follow a connected guide through the issues most relevant to your organisation.
Practical analysis of the Privacy Act 2020, IPP3A, individual rights, workplace privacy and emerging regulatory expectations.
Explore this topic 5 articlesGuidance on data breaches, serious-harm assessments, information security, identity checks and the responsibilities attached to sensitive data.
Explore this topic 2 articlesLegal and governance analysis for New Zealand organisations using AI, biometric processing and facial-recognition technologies.
Explore this topic 2 articlesPractical commentary on contractual risk, consumer regulation and legal changes affecting New Zealand businesses.
Explore this topicAll insights
20 articles on the issues behind important decisions.
A recent NZ Tribunal ruling shows privacy risk is not just about data breaches. Over-collection, misuse and biased decisions based on outdated information can cause real harm. What NZ businesses need to know.
Read article
How NZ businesses should assess whether a privacy breach is notifiable under the Privacy Act 2020. Practical guidance on the serious harm test.
Read article
Stay informed about the Children's Privacy Code and its impact on NZ businesses. Discover why the Children's Privacy Code is crucial for your compliance.
Read article
Discover the implications of the Bunnings decision on FRT for NZ businesses. Understand FRT risks and compliance to make informed choices.
Read article
Explore the latest IPP3A guidance changes and learn what steps your organization must take before May 2026 to ensure compliance. Get ready for IPP3A.
Read article
A practical legal guide to IPP3A readiness under the Privacy Act 2020. Build proportionate, defensible compliance before May 2026.
Read article
Explore the IPP3A Privacy Act 2020 Changes Exceptions for your business. Learn how these exceptions impact your legal obligations today.
Read article
Discover how the Privacy Act 2020 IPP3A will impact your business from May 2026. Stay informed about Privacy Act 2020 IPP3A changes.
Read article
Explore the Privacy Act 2020 IPP3A Changes, their impact, and why they're crucial now. Understand the Privacy Act 2020 IPP3A Changes today.
Read article
CJEU rules pseudonymised data may be anonymous in some contexts. What this means for New Zealand privacy law, AI, and contractual safeguards.
Read article
Weak ID checks are not just a privacy gap, they are a business risk
Read article
The Biometric Processing Privacy Code 2025 is now law under the Privacy Act. It introduces a specific and enforceable set of rules for any organisation in New Zealand using biometric technologies such as facial recognition, voice ID, fingerprints, or similar tools to identify, verify, or categorise individuals.Key Dates • The Code comes into force on 3 November 2025 • Organisations already using biometric systems must comply by 3 August 2026 This Code substitutes the 13 standard privacy princi
Read article
A finance business recently found itself under scrutiny after a fraud incident exposed significant gaps in its privacy practices, including a failure to notify the Privacy Commissioner as required under the Privacy Act.A caller pretending to be a customer was able to mislead staff, access the customer’s account, and make unauthorised changes and transactions. Not once, but multiple times. Even though the customer raised repeated concerns that someone was accessing and using their personal inform
Read article
A recent case from the NZ Privacy Commissioner, Case Note 329275 [2025] NZ Priv Cmr 2, is a timely reminder that good intentions do not always equal lawful use.A company took a photo of a short-term employee during their factory work. The employee believed the photo was for internal use only. Two years later, after they had left the country, they discovered their image was being used widely in public marketing, including on the side of the building, in shopping centres, and in the company’s annu
Read article
From 1 May 2026, agencies that collect personal information indirectly will need to notify individuals, unless an exception applies. The draft guidance is open for consultation until 25 June 2025.What stands out is how clear the OPC is about what compliance looks like.For example, the Guidance states:▶️ A bank is collecting the information and plans to send it on to a financial services company. The bank needs to tell the individual the name of the company it is sending the information to.... It
Read article
As a parent, it was heartbreaking to read how sensitive personal information was accessed and shared in ways that directly led to harm, including physical violence. And this is just a “snapshot” of what was reported.The reality is this: you can’t bolt privacy on after the fact.You need to build a culture that treats privacy as a layer of protection, not a layer of red tape. Without that mindset, even the best policies and procedures will fail.What stood out to me most was the quote that some soc
Read article
Great to hear from Michael Webster, New Zealand’s Privacy Commissioner, at the Buddle Findlay event a few weeks ago. He covered key privacy challenges, including: • Recent breaches and lessons learned. • IPP5 expectations—security and third-party sharing. • Biometrics and the progress of the new Privacy Code. • GDPR adequacy status and its implications. • Employee browsing risks—a growing concern.On employee browsing, the Commissioner highlighted that this is an increasingly serious risk, especi
Read article
A few commercial clients have asked how to manage tariff risks in their contracts. Tariff uncertainty is creating real challenges for businesses, from rising costs to supply chain disruptions. Reviewing key contract terms now can help mitigate risk. Key provisions to review: • Force Majeure: May not cover tariffs unless clearly drafted. • Change in Law/Tax Clauses: Can adjust pricing or timelines if tariffs impact costs. • Termination Clauses: Consider exit options for tariff-driven price incre
Read article
Right To Repair, Consumer Law, Commercial Law, legislation, O'Brien Legal
Read article