Privacy Act 2020

Notifiable privacy breaches and compliance notices - Compliance notices

125: Form of compliance notice

You could also call this:

"What to expect in a notice telling you to follow the law"

Illustration for Privacy Act 2020

When you get a compliance notice, it must tell you the name of your agency. It must also describe what you did wrong, and which law you broke. You will be told to fix the problem.

The notice must inform you that you can appeal the decision under section 131. It must also include any other information that the regulations made under section 215(1)(c) require.

The notice may tell you what steps to take to fix the problem. It may also include conditions that you must follow, and a deadline to fix the problem and report back. You may be given other information that will help you fix the problem.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS23518.


Previous

124: Issuing compliance notice, or

"Commissioner's process for issuing a compliance notice to agencies"


Next

126: Agency response to compliance notice, or

"What to do when an organisation gets a notice to follow the privacy rules"

Part 6Notifiable privacy breaches and compliance notices
Compliance notices

125Form of compliance notice

  1. A compliance notice issued to an agency must—

  2. state the name of the agency; and
    1. describe the breach, citing the relevant statutory provision or provisions; and
      1. require the agency to remedy the breach; and
        1. inform the agency of the right of appeal under section 131; and
          1. contain any other information required by any regulations made under section 215(1)(c).
            1. A compliance notice issued to an agency may—

            2. identify particular steps that the Commissioner considers need to be taken by the agency to remedy the breach:
              1. include conditions that the Commissioner considers are appropriate:
                1. state the date or dates by which the agency must—
                  1. remedy the breach; and
                    1. report to the Commissioner on the steps taken to do so:
                    2. include other information that the Commissioner considers would be useful.
                      Compare