Plain language law

New Zealand law explained for everyone

 Plain Language Law homepage
Back to
113: Assessment of likelihood of serious harm being caused by privacy breach
or “Deciding if a privacy breach is serious enough to report”
You could also call this:

“You must tell the Privacy Commissioner quickly about serious privacy problems”

If you’re an agency, you need to tell the Privacy Commissioner right away when you find out about a big privacy problem. This is called a notifiable privacy breach. You should let the Commissioner know as soon as you can after you realise it has happened.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

Next up: 115: Agency to notify affected individual or give public notice of notifiable privacy breach

or “Organisations must inform people or publicly announce serious privacy breaches”
Next

Part 6 Notifiable privacy breaches and compliance notices
Notifiable privacy breaches

114Agency to notify Commissioner of notifiable privacy breach

  1. An agency must notify the Commissioner as soon as practicable after becoming aware that a notifiable privacy breach has occurred.