Plain language law

New Zealand law explained for everyone

Privacy Act 2020

Notifiable privacy breaches and compliance notices - Compliance notices

126: Agency response to compliance notice

You could also call this:

"What to do when an organisation gets a notice to follow the privacy rules"

Illustration for Privacy Act 2020

If you get a compliance notice, you must do what it says. You have to take steps to follow the notice as soon as you can. You must also fix any problems by the date given in the notice.

You need to comply with the notice unless it is cancelled or the date is changed. If there is a problem, you must fix it by the given date, unless that date is changed. This means you have to act quickly to sort out any issues.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS23519.

Topics:
Rights and equality > Privacy
Previous

125: Form of compliance notice, or

"What to expect in a notice telling you to follow the law"

Next

127: Commissioner may vary or cancel compliance notice, or

"The Commissioner can change or cancel a notice to an agency if it's no longer needed or needs updating."

Part 6Notifiable privacy breaches and compliance notices
Compliance notices

126Agency response to compliance notice

  1. An agency that is issued with a compliance notice must take steps to comply with the notice, including taking any particular steps specified in the notice.

  2. The agency must—

  3. comply with the notice as soon as practicable after receiving it unless it is cancelled or suspended; and
    1. if applicable, remedy the breach by the date stated in the notice unless that date is varied or modified.