A business leaked my personal information. What are my rights?

General information from Lawmateanz

Under New Zealand's Privacy Act 2020, a business that has a privacy breach likely to cause serious harm must notify the Privacy Commissioner and affected people as soon as practicable.

If you've been affected, take steps to protect yourself, such as changing passwords, watching your bank accounts, and contacting IDCARE for help with identity theft.

You can complain to the business first, and then to the Privacy Commissioner if you're not satisfied. In some cases, the Human Rights Review Tribunal can award compensation.

The Privacy Commissioner's website has free guidance.

Written by Lawmateanz, not by a lawyer. General information only, not legal advice about your situation. For advice about your own matter, talk to a lawyer.

Lawyers listed on Lawmateanz can answer this question. If you asked it, we'll email you as soon as it's answered.

Are you a lawyer? Answer this question · List free on Lawmateanz

General information only. Answers are written by independent lawyers based only on what's in the question. They aren't legal advice about your situation and don't create a lawyer–client relationship. For advice about your own matter, talk to a lawyer directly.