Privacy — New Zealand

A modern Privacy Act, a Commissioner with enforceable compliance notices, and two privacy torts created by the courts.

Location map — New Zealand — Privacy
New Zealand. Simplified location map — Natural Earth data, public domain.

The legal framework

The Privacy Act 2020 replaced the 1993 Act and introduced mandatory breach notification and compliance notices. Separately, the courts recognised a tort of public disclosure of private facts in Hosking v Runting in 2004, and a tort of intrusion into seclusion in C v Holland in 2012.

Key points

StatutePrivacy Act 2020, with thirteen information privacy principles
RegulatorPrivacy Commissioner, free complaints, can issue compliance notices
Breach notificationMandatory where serious harm is likely
TortsPublic disclosure of private facts, and intrusion into seclusion
TribunalHuman Rights Review Tribunal awards damages, including for humiliation
Online harmHarmful Digital Communications Act 2015, with Netsafe as approved agency
Highly offensive testPublication must be highly offensive to a reasonable person
Legitimate public concernA defence to the disclosure tort
DamagesThe Tribunal awards for humiliation, loss of dignity and injury to feelings

In practice

Where to go

Worth knowing

The Human Rights Review Tribunal has a long waiting list. Where the harm is ongoing, the Netsafe route under the Harmful Digital Communications Act is usually much faster. Awards for humiliation and injury to feelings are the main remedy, and they are modest. The value of the process is usually the order, not the money.

Official sources and links

← All countries The general article on this topic →

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map

A question, a correction, a suggestion? Write to us.