New Zealand Privacy Act Review Proposes Mandatory Data Breach Penalties for Businesses
The Privacy Commissioner recommends mandatory penalties up to $1 million for serious data breaches, replacing current $10,000 maximum fines. New requirements would mandate 72-hour breach reporting and five-day customer notification timelines.