Loading...
Data & Privacy Articles
Expert articles and practical legal guides on data & privacy for new zealand businesses.
Data Sharing Agreement Template NZ: Protect Data Rights And Privacy Compliance
If your business shares information with another organisation (or receives it from one), you’re already dealing with legal risk - even if it feels like “just a spreadsheet” or “just a system...
26 March 2026
Data Breach Compensation: What NZ Businesses Could Be Liable For
If you run a small business in New Zealand, chances are you’re collecting more personal information than you realise - customer contact details, delivery addresses, payment information, staff records, marketing lists, and...
26 March 2026
Cross-Border Data Transfers Under The NZ Privacy Act
If you run a New Zealand business, chances are you’re already sending information overseas - even if you don’t realise it. Using cloud storage, outsourcing payroll, hiring overseas contractors, running email marketing...
26 March 2026
Cost To Respond To An Information Privacy Request In New Zealand
If you run a small business in New Zealand, it’s only a matter of time before someone asks for all the personal information you hold about them. That could be a customer,...
25 March 2026
Consequences Of Breaching Workplace Confidentiality In New Zealand
Most small businesses run on trust. Your team handles customer details, supplier pricing, payroll info, business plans, product roadmaps, sales pipelines and (in many cases) genuinely sensitive personal information. If that information...
22 March 2026
Collecting Driver’s Licence Photos: NZ Privacy Compliance
As a small business owner, it’s pretty common to want a quick way to confirm who you’re dealing with. Maybe you’re hiring out equipment, offering a subscription service, onboarding a new customer...
18 March 2026
Client Confidentiality Obligations In New Zealand For Businesses
If your business handles client information, you’re dealing with client confidentiality every day - even if you don’t call it that. It can be as simple as storing a customer’s contact details,...
18 March 2026
ChatGPT & The NZ Privacy Act: Key Compliance Steps
AI tools like ChatGPT can be a huge productivity boost for small businesses. You can draft emails faster, summarise meeting notes, brainstorm marketing copy, and even build internal processes without hiring a...
17 March 2026Cease And Desist Letter Template: How To Send One Safely In New Zealand
If you run a small business, there’s a good chance you’ll eventually deal with someone copying your branding, reposting your content, using your photos without permission, or making claims that confuse your...
16 March 2026
CCTV With Audio In New Zealand: Legal Risks And Privacy Compliance Tips
If you’re running a café, retail store, gym, warehouse, clinic, or office, CCTV can feel like a no-brainer. It helps deter theft, supports health and safety, and can clear up disputes when...
16 March 2026
CCTV And Workplace Surveillance Laws In New Zealand
If you run a small business, CCTV can feel like a no-brainer. It can deter theft, help you investigate incidents, and give you peace of mind when you’re not on site. But...
16 March 2026
Can You Film People In Public? NZ Privacy Laws Explained
If you run a small business in New Zealand, chances are you’ve thought about filming content at some point. Maybe it’s a behind-the-scenes TikTok in your café, a customer testimonial at your...
12 March 2026
Can Employers Read Employee Emails Under The Privacy Act 2020?
If you run a small business, chances are your team relies heavily on email to get the job done. But sooner or later, a tricky question pops up: can employers read employee...
10 March 2026
Breach Of Confidentiality In New Zealand: Remedies After A Privacy Breach
Discovering a privacy breach in your business can feel like an instant loss of control - customer details are out, an employee has forwarded sensitive files, or a contractor has taken your...
6 March 2026
Are Work Email Addresses Personal Information Under The NZ Privacy Act?
If you run a small business, you probably use work email addresses every day - for onboarding staff, sharing rosters, signing up to software tools, dealing with customers, and keeping projects moving....
5 March 2026Accidental Data Breaches In NZ: Privacy Act Breaches And Penalties
This article is general information only and doesn’t take into account your business’s specific circumstances. It isn’t legal advice. If you’re running a small business, it’s easy to assume that privacy act...
27 February 2026
“Reject All Cookies” Buttons In New Zealand: Legal, Clear Consent
If you run a small business website, chances are you’ve seen (or already use) a cookie banner. You might also be wondering whether you need a clear “ Reject all cookies ”...
26 February 2026Privacy Act Breach In New Zealand: What It Means For Your Business
If you run a small business, chances are you collect personal information every day - customer names, emails, delivery addresses, staff payroll details, supplier contact lists, and (depending on your industry) sometimes...
24 February 2026
New Zealand Privacy Laws: What Small Businesses Need To Know
If you’re running a small business, you’re probably collecting more personal information than you realise. Even something as simple as taking online bookings, sending invoices, running a mailing list, or having CCTV...
23 February 2026Cybersecurity For NZ Businesses: Legal Risks, Privacy Obligations And Steps
Most New Zealand small businesses rely on technology every day - email, cloud storage, online banking, eCommerce, booking platforms, and digital marketing. That convenience is great for growth, but it also means...
19 February 2026
What Is Personal Information Under New Zealand’s Privacy Act?
Most small businesses collect more data than they realise. Maybe you run an online store and you’ve got customer delivery details. Maybe you manage a team and you store emergency contacts. Maybe...
18 February 2026
Marketing Emails In New Zealand: Privacy Act And Spam Law Requirements
Marketing emails can be one of the most cost-effective ways to grow a small business in New Zealand. You can keep customers in the loop, promote new products, and build repeat sales...
16 February 2026
Data Retention In New Zealand: Privacy Act 2020 & Record-Keeping Duties
If you run a small business in New Zealand, you probably collect more information than you realise. Customer details, invoices, CCTV footage, staff records, website analytics, email lists, support tickets, delivery addresses...
14 February 2026Credit Card Privacy Compliance In New Zealand: What Businesses Must Do
If you run a small business, taking card payments can feel like a no-brainer. It's fast, it's convenient, and your customers expect it. But the moment you collect, use, store or even...
14 February 2026
How NZ Businesses Must Collect, Store And Use Customer Data Legally
If you run a small business, you probably rely on customer data every day ? names, emails, delivery addresses, purchase history, booking notes, and maybe even CCTV footage or recorded calls. Handled...
7 February 2026
Privacy Policy Template: What NZ Businesses Must Include (Example)
If you're running a business in New Zealand, chances are you collect some form of personal information - even if it's "just" names and email addresses for a newsletter or online orders....
5 February 2026
Privacy Policy Requirements In New Zealand: What To Include & Compliance Tips
If you run a small business in New Zealand, chances are you’re collecting personal information in some form - customer names, delivery addresses, email lists, staff records, or even IP addresses through...
29 January 2026
GDPR Compliance For New Zealand Businesses: What You Need To Know
If you run a New Zealand business, you might assume the EU’s privacy rules don’t really apply to you. But if you deal with customers, users, or clients in Europe (even online),...
28 January 2026
Customer Database Laws In New Zealand: Privacy, Consent And Compliance
Note: This article is general information for small businesses and isn’t legal advice. Privacy compliance depends on your specific circumstances. Building a customer database can be one of the smartest moves you...
27 January 2026Whistleblowing In New Zealand: Protected Disclosures Act 2022 Guide
Most small business owners don’t set out to build a workplace where problems get hidden. But in the real world, issues can pop up - a safety shortcut, a privacy slip, questionable...
27 January 2026
How To Collect And Store Credit Card Details In New Zealand
If your business takes payments online, over the phone, or by recurring subscription, it’s only a matter of time before you run into this question: can you collect and store customers’ credit...
25 January 2026
Privacy Act 2020 In New Zealand: The 13 Information Privacy Principles
If you’re running a small business in New Zealand, chances are you’re collecting personal information every day - customer names, emails, delivery addresses, staff records, CCTV footage, loyalty programme data, or even...
23 January 2026Cybersecurity Legal Essentials For Data Protection And Breach Response In NZ
Cybersecurity isn’t just an “IT issue” anymore. If you’re running a small business in New Zealand, it’s also a legal and commercial risk you need to manage from day one. Even if...
18 January 2026
How To Prepare A Data Breach Response Plan For Your Business (2026 Updated)
Most business owners don’t plan for a data breach the same way they plan for sales, hiring, or growth. But in practice, a data breach response plan is one of those “legal...
6 January 2025
Who Can Access Medical Records? (2026 Updated)
Medical records can feel intensely personal - because they are. They can include your diagnoses, prescriptions, test results, mental health notes, ACC or insurance documents, and sometimes even sensitive details you shared...
6 January 2025
Need A Data Processing Agreement? (2026 Updated)
If your business uses third parties to store, handle, analyse or otherwise “process” personal information, a Data Processing Agreement (DPA) can be one of the most practical ways to protect your business...
6 January 2025Worried About Privacy Complaints? How To Make Sure Your Business Is Prepared (2026 Updated)
Most business owners don’t set out to “get privacy wrong”. Usually, it’s the opposite - you’re trying to do the right thing while juggling customers, staff, cashflow, and whatever new tech tool...
6 January 2025
What Is The Difference Between Terms Of Use And Terms & Conditions? (2026 Updated)
If you run a website, app, or online store, you’ve probably seen businesses link to both “Terms of Use” and “Terms & Conditions” (sometimes plus a Privacy Policy) in the footer. It’s...
6 January 2025
Access Request Forms And Privacy: Why Are They Important? (2026 Updated)
If you run a business in New Zealand, chances are you’re collecting some form of personal information every day - customer contact details, delivery addresses, enquiry forms, email lists, CCTV footage, employee...
6 January 2025
Is It Legal To Have Workplace Cameras And Surveillance? (2026 Updated)
It’s completely normal to want more visibility over what’s happening in your workplace. Maybe you’ve had stock go missing, you’re worried about health and safety incidents, or you run a customer-facing business...
6 January 2025When Would I Need A Privacy Consent Form? (2026 Updated)
If your business collects personal information (even something as simple as a name and email), you’ve probably wondered whether you need a privacy consent form - and what “consent” actually means in...
6 January 2025
What Is A Participant Consent Form? (2026 Updated)
If you run workshops, events, research projects, health and wellness programmes, or any kind of activity where people participate (especially if you’ll collect personal information, photos, videos, or feedback), a participant consent...
6 January 2025
Personal Information Vs Sensitive Information: What’s The Difference? (2026 Updated)
If you run a business, you probably collect “personal information” every day - customer names, delivery addresses, staff bank details, even CCTV footage. But not all personal information is treated the same....
6 January 2025
Why Do I Need A Photography/Video Consent Form? (2026 Updated)
You’ve nailed the shoot, the lighting was perfect, and the client’s thrilled. Then you go to post the photos or video on your website or social channels… and you hesitate. Can you...
6 January 2025
Cookie Pop-Ups, Do I Need One? (2026 Updated)
When you’re building (or refreshing) your website, cookie pop-ups can feel like one more annoying “internet requirement” you have to deal with before you can get on with running your business. But...
6 January 2025
Selling Personal Information: What’s Allowed? (2026 Updated)
If your business collects customer data, runs marketing campaigns, or uses third-party platforms, you’ve probably wondered where the legal line is when it comes to “selling” personal information. And you’re not alone....
6 January 2025
Is A Website Privacy Policy Required By Law? (2026 Updated)
If you run a website in New Zealand, chances are you collect at least some personal information - even if it’s just an email address from a contact form or an IP...
6 January 2025
What Is The Right To Be Forgotten? (2026 Updated)
If you run a business (or you’re building one), you’ve probably had that moment where you realise just how much information about people lives online - on websites, social media, customer databases,...
6 January 2025
What Is A Medical Release Consent Form? (2026 Updated)
If you run a business that needs to collect or share someone’s health information (even occasionally), you’ll quickly come across the idea of a medical release consent form. This can feel a...
6 January 2025
Do I Need A Privacy Collection Notice If I Have A Privacy Policy? (2026 Updated)
If you’ve already got a Privacy Policy on your website, it’s easy to assume you’ve “ticked the privacy box” and can move on. But in New Zealand, a Privacy Policy and a...
6 January 2025
Need support?
Need help with your business legals?
Speak with Sprintlaw to get practical legal support and fixed-fee options tailored to your business.