Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact<\/title>\n<meta name=\"description\" content=\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact\" \/>\n<meta property=\"og:description\" content=\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\" \/>\n<meta property=\"og:site_name\" content=\"Constant Contact\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/constantcontact\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-22T16:14:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-22T16:15:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-blog-homepage-2026.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2918\" \/>\n\t<meta property=\"og:image:height\" content=\"1648\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alexandra Marinaki\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@constantcontact\" \/>\n<meta name=\"twitter:site\" content=\"@constantcontact\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"},\"author\":{\"name\":\"Alexandra Marinaki\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8\"},\"headline\":\"Privacy Act 2020: What NZ Businesses Need to Know\",\"datePublished\":\"2026-09-22T16:14:59+00:00\",\"dateModified\":\"2026-09-22T16:15:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"},\"wordCount\":2138,\"publisher\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"},\"keywords\":[\"best practices\",\"compliance\",\"data collection\",\"new zealand\"],\"articleSection\":[\"Small Business Marketing\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\",\"name\":\"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact\",\"isPartOf\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#website\"},\"datePublished\":\"2026-09-22T16:14:59+00:00\",\"dateModified\":\"2026-09-22T16:15:04+00:00\",\"description\":\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.constantcontact.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Act 2020: What NZ Businesses Need to Know\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#website\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/\",\"name\":\"Constant Contact\",\"description\":\"Small Business Online Marketing Solutions\",\"publisher\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.constantcontact.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\",\"name\":\"ConstantContact\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg\",\"contentUrl\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg\",\"width\":300,\"height\":275,\"caption\":\"ConstantContact\"},\"image\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/constantcontact\/\",\"https:\/\/x.com\/constantcontact\",\"https:\/\/www.instagram.com\/constantcontact\",\"https:\/\/www.linkedin.com\/company\/constant-contact\/\",\"https:\/\/www.pinterest.com\/constantcontact\/\",\"https:\/\/www.youtube.com\/user\/constantcontact\",\"https:\/\/en.wikipedia.org\/wiki\/Constant_Contact\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8\",\"name\":\"Alexandra Marinaki\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/image\/593b6dcb3d3209e301de9c348e21bbab\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png\",\"contentUrl\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png\",\"caption\":\"Alexandra Marinaki\"},\"description\":\"Alexandra is a Senior Content Writer with seven years of marketing experience and a background in psychology. She uses that mix to understand what actually makes readers tick, turning their real everyday pain points into practical, educational content and thought leadership. A big fan of personal development and storytelling, she writes to help people learn and grow. When she\u2019s offline, she\u2019s usually admiring art.\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/author\/alexandra\/\"}]}<\/script>\n","yoast_head_json":{"title":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","og_description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","og_url":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","og_site_name":"Constant Contact","article_publisher":"https:\/\/www.facebook.com\/constantcontact\/","article_published_time":"2026-09-22T16:14:59+00:00","article_modified_time":"2026-09-22T16:15:04+00:00","og_image":[{"width":2918,"height":1648,"url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-blog-homepage-2026.jpg","type":"image\/jpeg"}],"author":"Alexandra Marinaki","twitter_card":"summary_large_image","twitter_creator":"@constantcontact","twitter_site":"@constantcontact","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#article","isPartOf":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"},"author":{"name":"Alexandra Marinaki","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8"},"headline":"Privacy Act 2020: What NZ Businesses Need to Know","datePublished":"2026-09-22T16:14:59+00:00","dateModified":"2026-09-22T16:15:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"},"wordCount":2138,"publisher":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"},"keywords":["best practices","compliance","data collection","new zealand"],"articleSection":["Small Business Marketing"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","url":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","name":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","isPartOf":{"@id":"https:\/\/www.constantcontact.com\/blog\/#website"},"datePublished":"2026-09-22T16:14:59+00:00","dateModified":"2026-09-22T16:15:04+00:00","description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","breadcrumb":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.constantcontact.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Privacy Act 2020: What NZ Businesses Need to Know"}]},{"@type":"WebSite","@id":"https:\/\/www.constantcontact.com\/blog\/#website","url":"https:\/\/www.constantcontact.com\/blog\/","name":"Constant Contact","description":"Small Business Online Marketing Solutions","publisher":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.constantcontact.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.constantcontact.com\/blog\/#organization","name":"ConstantContact","url":"https:\/\/www.constantcontact.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg","contentUrl":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg","width":300,"height":275,"caption":"ConstantContact"},"image":{"@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/constantcontact\/","https:\/\/x.com\/constantcontact","https:\/\/www.instagram.com\/constantcontact","https:\/\/www.linkedin.com\/company\/constant-contact\/","https:\/\/www.pinterest.com\/constantcontact\/","https:\/\/www.youtube.com\/user\/constantcontact","https:\/\/en.wikipedia.org\/wiki\/Constant_Contact"]},{"@type":"Person","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8","name":"Alexandra Marinaki","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/image\/593b6dcb3d3209e301de9c348e21bbab","url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png","contentUrl":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png","caption":"Alexandra Marinaki"},"description":"Alexandra is a Senior Content Writer with seven years of marketing experience and a background in psychology. She uses that mix to understand what actually makes readers tick, turning their real everyday pain points into practical, educational content and thought leadership. A big fan of personal development and storytelling, she writes to help people learn and grow. When she\u2019s offline, she\u2019s usually admiring art.","url":"https:\/\/www.constantcontact.com\/blog\/author\/alexandra\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/users\/736"}],"replies":[{"embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/comments?post=173750"}],"version-history":[{"count":10,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750\/revisions"}],"predecessor-version":[{"id":174043,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750\/revisions\/174043"}],"wp:attachment":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/media?parent=173750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/categories?post=173750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/tags?post=173750"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/content_type?post=173750"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/industry?post=173750"},{"taxonomy":"feature","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/feature?post=173750"},{"taxonomy":"article_type","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/article_type?post=173750"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/coauthors?post=173750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":173750,"date":"2026-09-22T12:14:59","date_gmt":"2026-09-22T16:14:59","guid":{"rendered":"https:\/\/www.constantcontact.com\/blog\/?p=173750"},"modified":"2026-09-22T12:15:04","modified_gmt":"2026-09-22T16:15:04","slug":"privacy-act-2020-nz","status":"publish","type":"post","link":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","title":{"rendered":"Privacy Act 2020: What NZ Businesses Need to Know"},"content":{"rendered":"\n

The Privacy Act 2020<\/strong> applies to every New Zealand business and charity<\/strong>, no matter how small your contact list is.<\/li>\n\n\n\n
Build your approach around the 13<\/strong> information privacy principles<\/strong> that cover collecting, storing, using, and sharing sensitive personal information.<\/li>\n\n\n\n
If a breach could cause serious harm, you must tell the<\/strong> Privacy Commissioner<\/strong> and the people affected<\/strong> as soon as you can.<\/li>\n\n\n\n
Keep the Privacy Act 2020<\/strong> separate from marketing consent rules<\/strong> under the Unsolicited Electronic Messages Act 2007.<\/li>\n<\/ul>\n\n\n\n
Most small business owners and charity leaders never set out to mishandle anyone’s data. But customer names, email addresses, and payment details can pile up fast. The rules might feel like a problem for big corporations, but small organizations are just as responsible for protecting that data.<\/p>\n\n\n\n
This guide breaks New Zealand’s Privacy Act 2020 down in plain language. We’ll cover what counts as personally identifiable information and a five-step compliance plan. We’ll also look at the data breach rules that carry financial penalties and the habits that keep you safe.<\/p>\n\n\n\n
What is the Privacy Act 2020?<\/h2>\n\n\n\n
The Privacy Act 2020 is Aotearoa New Zealand’s main data protection law. It sets the rules for how your business collects, stores, uses, and shares people’s personal information.<\/p>\n\n\n\n
It replaced the data Privacy Act 1993 and applies to organisations of every size. A solo consultant has the same core duties as a national retailer.<\/p>\n\n\n\n
Here are the parts that matter most for a small operation:<\/p>\n\n\n\n
\n
Personal information:<\/strong> This is any detail that identifies someone, such as a name, email address, or mobile number.<\/li>\n\n\n\n
Agencies:<\/strong> This is the Act’s term for the organisations it covers, including nearly every business and charity in the country.<\/li>\n\n\n\n
The 13<\/strong> information privacy principles<\/strong> (IPPs):<\/strong> These are the core rules for handling that data from collecting personal information through to disposal.<\/li>\n\n\n\n
The<\/strong> Privacy Commissioner<\/strong>:<\/strong> This is the regulator that oversees the Act, working alongside the Office of the Privacy Commissioner (OPC).<\/li>\n\n\n\n
Notifiable breaches:<\/strong> These are serious privacy breaches you’re legally required to report.<\/li>\n<\/ul>\n\n\n\n
The Act is built on the 13 privacy principles<\/a> that the OPC publishes in full, and it applies whether you hold 30 contacts or 30,000.<\/p>\n\n\n\n
Why does this matter for a small team? In Constant Contact’s Small Business Now report<\/a>, 44% of small business owners named customer engagement their top anticipated marketing barrier for 2026.<\/p>\n\n\n\n
That tells you something important. Keeping people’s trust is the whole game, and careless data handling is the fastest way to lose it.<\/p>\n\n\n\n
Types of personal information your business collects<\/h2>\n\n\n\n
Not sure what actually counts as personal information? It’s broader than most people expect, and sorting it into groups makes your duties easier to see. The more sensitive the details, the more care they need.<\/p>\n\n\n\n
Contact and identity details<\/h3>\n\n\n\n
These are the everyday details you use to reach and recognise a customer. You collect them at almost every signup, booking, or enquiry.<\/p>\n\n\n\n
Here are some of these unique identifiers:<\/p>\n\n\n\n
\n
A customer’s name and email address on a newsletter form.<\/li>\n\n\n\n
A mobile number saved for booking reminders at a salon.<\/li>\n<\/ul>\n\n\n\n
Financial and payment information<\/h3>\n\n\n\n
This covers anything tied to money transferring, and it needs stronger protection than a name alone. You collect it whenever someone buys from you or donates to your cause.<\/p>\n\n\n\n
Check out these examples:<\/p>\n\n\n\n
\n
Card details entered at an online checkout.<\/li>\n\n\n\n
A donor’s bank details held by a charity for regular giving.<\/li>\n<\/ul>\n\n\n\n
Health and other sensitive information<\/h3>\n\n\n\n
Sensitive information can cause real harm if it leaks, so treat it with extra caution. Many small operations hold more of it than they realise, from dietary notes to accessibility needs.<\/p>\n\n\n\n
For instance:<\/p>\n\n\n\n
\n
Biometric information noted by a gym before a new training programme.<\/li>\n\n\n\n
Dietary requirements collected for a catered community event.<\/li>\n<\/ul>\n\n\n\n
Behavioural and engagement data<\/h3>\n\n\n\n
This is the information you gather about how people interact with you online. It helps you personalise messages, but it’s still personal information under the Act.<\/p>\n\n\n\n
Here are some example details:<\/p>\n\n\n\n
\n
Which emails a subscriber opens and clicks.<\/li>\n\n\n\n
Pages a visitor views before filling in your contact form.<\/li>\n<\/ul>\n\n\n\n
How to comply with the Privacy Act 2020 in five steps<\/h2>\n\n\n\n
Compliance sounds daunting at first, but it comes down to a few habits you can build into your existing systems. Start with these five steps and adjust them to the size of your operation.<\/p>\n\n\n\n
Step 1: Map the personal information you hold<\/h3>\n\n\n\n
Write down what data you collect, where it lives, and who can see it. List everyone who can open your customer data, including staff, volunteers, and any tools you’ve connected. Access should match the job, not the length of time someone has been around.<\/p>\n\n\n\n
Most owners are surprised by how many places data ends up, from a booking app to a spreadsheet to an old inbox. A simple list turns a vague worry into a clear picture you can quickly act on.<\/p>\n\n\n\n
Step 2: Collect only what you need<\/h3>\n\n\n\n
Look at each form and field you use to collect contacts. Ask whether you truly need every detail, or whether habit has crept in over time. Good sign-up forms<\/a> make this easy by letting you request just a name and an email. Growing your list through permission-based sending also means every contact has agreed to hear from you, which keeps your collection purpose honest.<\/p>\n\n\n\n
Trimming unused fields lowers your risk and often lifts sign-up rates, since shorter forms feel less demanding. If you run welcome or re-permission messages through email automation<\/a>, check that they only reference details you still collect.<\/p>\n\n\n\n
Step 3: Store personal information securely<\/h3>\n\n\n\n
Keep data behind strong passwords, limit who can access it, and turn on two-factor login wherever you can. Security is the fifth information privacy principle, and it’s where many breaches begin.<\/p>\n\n\n\n
Think about the practical gaps first, such as a shared login or a laptop with no screen lock. Fixing those costs nothing and prevents serious threats.<\/p>\n\n\n\n
Step 4: Publish a clear privacy policy<\/h3>\n\n\n\n
Tell people what you collect, why, and how they can reach you about it. A short, honest policy builds trust and satisfies your transparency duties.<\/p>\n\n\n\n
This guide on creating a privacy policy<\/a> walks through what to include without the legal jargon. Link to it from your sign-up forms and your website footer so it’s easy to find.<\/p>\n\n\n\n
Step 5: Plan your privacy breach response<\/h3>\n\n\n\n
Decide in advance who investigates a suspected breach, who assesses the harm, and who reports it. A plan you wrote on a calm day beats scrambling on a bad one. Walk through a realistic scenario, such as a spreadsheet of contacts emailed to the wrong person. Time how long it would take you to spot it, assess the harm, and report it.<\/p>\n\n\n\n
Nobody enjoys planning for things going wrong, but a little prep now saves a lot of stress later. Knowing your steps ahead of time means a lost laptop or a misdirected email becomes a manageable task, not a crisis.<\/p>\n\n\n\n
Key Privacy Act 2020 rules for New Zealand small businesses<\/h2>\n\n\n\n
Focus your attention on the rules that carry the clearest obligations and penalties. These are the areas the regulator cares about most, and where mistakes are hardest to undo.<\/p>\n\n\n\n
Report serious breaches to the Privacy Commissioner<\/h3>\n\n\n\n
If a privacy breach has caused, or is likely to cause, serious harm, you must report it immediately. The Office of the Privacy Commissioner<\/a> says you must notify the Commissioner and the affected people as soon as practicable. That means acting quickly once you become aware of the breach.<\/p>\n\n\n\n
This is where your plan earns its keep. Under the Privacy Act 2020<\/a>, failing to notify a breach without reasonable excuse is an offence carrying a fine of up to $10,000. For a small operation, that is a cost worth avoiding with a simple response plan.<\/p>\n\n\n\n
Take care before sending data overseas<\/h3>\n\n\n\n
Information privacy principle 12 (IPP 12) covers sending information overseas<\/a>, such as when you use an offshore supplier. You need reasonable grounds to believe the information will stay adequately protected.<\/p>\n\n\n\n
This is one place where jurisdictions get confused. The Privacy Act 2020 is a separate law from the European Union’s General Data Protection Regulation (GDPR). Learning how the GDPR works<\/a> helps only if you also serve people in Europe.<\/p>\n\n\n\n
Give people access to their own information<\/h3>\n\n\n\n
People can ask to see the personal information you hold about them and request corrections. These rights come from information privacy principles 6 and 7.<\/p>\n\n\n\n
You generally have 20 working days to respond to a request. Keeping a tidy, well-organised system of records makes these requests much easier to handle.<\/p>\n\n\n\n
Keep marketing consent separate under the UEMA<\/h3>\n\n\n\n
Your duty to handle personal information sits under the Privacy Act 2020. Your duty to get consent before sending marketing messages sits under a separate law. That law is the Unsolicited Electronic Messages Act 2007 (UEMA), which the Department of Internal Affairs (DIA) enforces.<\/p>\n\n\n\n
The UEMA requires consent, accurate sender details, and a working unsubscribe option in every commercial message. The DIA<\/a> can impose substantial fines for breaches, up to $500,000 for organisations. If you send campaigns by text, your SMS marketing tools<\/a> should handle opt-outs automatically so you meet both laws at once.<\/p>\n\n\n\n
Privacy Act 2020 Dos and Don’ts<\/h2>\n\n\n\n
Let’s explore some of the most important dos and don’ts to comply with data duties.<\/p>\n\n\n\n
Dos<\/h3>\n\n\n\n
\n
Treat the rules as yours from day one.<\/strong> There is no small-business exemption in New Zealand, so the Privacy Act 2020 applies to you regardless of size.<\/li>\n\n\n\n
Cut every form field back to what the task genuinely requires.<\/strong> Ask only for the minimum information you actually need to complete the task.<\/li>\n\n\n\n
Publish a short privacy policy and link to it at every signup.<\/strong> Be open with people about how their data will be collected and used.<\/li>\n\n\n\n
Write a simple breach response plan.<\/strong> Having a step-by-step process ready ensures you can act as soon as practicable if something goes wrong.<\/li>\n\n\n\n
Keep privacy rules and marketing consent separate.<\/strong> Handle personal information under the Privacy Act 2020 and message consent under the Unsolicited Electronic Messages Act (UEMA).<\/li>\n<\/ul>\n\n\n\n
Don’ts<\/h3>\n\n\n\n
\n
Don’t assume the<\/strong> Privacy Act<\/strong> doesn’t apply because you’re small.<\/strong> Even careful owners slip up here, but small organizations are held to the exact same legal standards.<\/li>\n\n\n\n
Don’t collect more information than you’ll ever use.<\/strong> Piling up unnecessary customer names, details, or contact fields creates extra risk.<\/li>\n\n\n\n
Don’t keep people in the dark about their data.<\/strong> Never collect information without clearly pointing users toward your privacy practices.<\/li>\n\n\n\n
Don’t wait for a crisis to figure out your next steps.<\/strong> Spotting risks early keeps a small oversight from escalating into a reportable breach.<\/li>\n\n\n\n
Don’t treat privacy compliance and marketing consent as the same thing.<\/strong> They are governed by distinct laws with different obligations.<\/li>\n<\/ul>\n\n\n\nPut privacy at the centre of your marketing<\/h2>\n\n\n\n
Getting the Privacy Act 2020 right comes down to clear habits. Collect only what you need, store it securely, and be honest about its use. Handled this way, privacy becomes part of the trust you build with every customer and supporter.<\/p>\n\n\n\n
The simplest next step is to tidy up how you collect and store contacts, ideally in one place rather than scattered across tools. An email marketing platform<\/a> that records consent, secures your list, and manages unsubscribes does much of this quietly in the background.<\/p>\n\n\n\n
Ready to build good privacy habits into your marketing? Start a free trial<\/a> with Constant Contact and set your contacts up the right way.<\/p>\n\n\n\n
FAQs<\/h2>\n\n\n\n
Here are the most common questions about New Zealand’s Privacy Act 2020:<\/p>\n\n\n\n
1. Who does the Privacy Act 2020 apply to?<\/h3>\n\n\n\n
It applies to almost every business and organisation in Aotearoa New Zealand, regardless of size. A sole trader, a charity, and a large company all share the same core duties, and overseas firms carrying on business here are covered too.<\/p>\n\n\n\n
2. What counts as personal information?<\/h3>\n\n\n\n
Personal information is any detail about an identifiable person, such as a name, email address, mobile number, or payment record. If someone could be recognised from it, the Act treats it as personal information.<\/p>\n\n\n\n
3. What should I do if I have a privacy breach?<\/h3>\n\n\n\n
First, assess whether the breach has caused or is likely to cause serious harm. If it has, notify the Privacy Commissioner and the affected people as soon as you can. Keep a record of what happened and how you responded.<\/p>\n\n\n\n
4. How is the Privacy Act 2020 different from the GDPR?<\/h3>\n\n\n\n
The Privacy Act 2020 is New Zealand’s own law, while the GDPR is the European Union’s data protection regulation. They share similar goals, but the GDPR only applies to you if you handle the personal information of people in Europe.<\/p>\n\n\n\n
5. Do I need a privacy policy?<\/h3>\n\n\n\n
A clear privacy policy is one of the easiest ways to meet your transparency duties and build trust. Explain what you collect, why you collect it, and how people can contact you about their information.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"
Most small business owners and charity leaders never set out to mishandle anyone’s data. But customer names, email addresses, and payment details can pile up fast. The rules might feel like a problem for big corporations, but small organizations are just as responsible for protecting that data. This guide breaks New Zealand’s Privacy Act 2020 […]<\/p>\n","protected":false},"author":736,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false,"post_signup_destination":"default"},"categories":[1494],"tags":[8770,9827,8901,9467],"content_type":[1462],"industry":[8498],"feature":[8605,9685],"article_type":[],"coauthors":[9895],"class_list":["post-173750","post","type-post","status-publish","format-standard","hentry","category-small-biz-marketing","tag-best-practices","tag-compliance","tag-data-collection","tag-new-zealand","content_type-blog-article","industry-industry-general","feature-email-list-management","feature-sign-up-forms"],"acf":{"post_signup_destination":"default","article_thumbnail":false,"show_last_modified_date":true,"homepage_featured":false,"show_featured_image":false,"show_table_of_contents":true,"region":false,"explore_post_button_text":"Explore this article with AI","explore_post_link":"","post_hreflangs":[{"hreflang":"en-nz"}],"ctct_related_features":false},"yoast_head":"\nPrivacy Act 2020: What NZ Businesses Need to Know | Constant Contact<\/title>\n<meta name=\"description\" content=\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact\" \/>\n<meta property=\"og:description\" content=\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\" \/>\n<meta property=\"og:site_name\" content=\"Constant Contact\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/constantcontact\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-22T16:14:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-22T16:15:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-blog-homepage-2026.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2918\" \/>\n\t<meta property=\"og:image:height\" content=\"1648\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alexandra Marinaki\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@constantcontact\" \/>\n<meta name=\"twitter:site\" content=\"@constantcontact\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"},\"author\":{\"name\":\"Alexandra Marinaki\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8\"},\"headline\":\"Privacy Act 2020: What NZ Businesses Need to Know\",\"datePublished\":\"2026-09-22T16:14:59+00:00\",\"dateModified\":\"2026-09-22T16:15:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"},\"wordCount\":2138,\"publisher\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"},\"keywords\":[\"best practices\",\"compliance\",\"data collection\",\"new zealand\"],\"articleSection\":[\"Small Business Marketing\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\",\"name\":\"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact\",\"isPartOf\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#website\"},\"datePublished\":\"2026-09-22T16:14:59+00:00\",\"dateModified\":\"2026-09-22T16:15:04+00:00\",\"description\":\"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.constantcontact.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Act 2020: What NZ Businesses Need to Know\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#website\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/\",\"name\":\"Constant Contact\",\"description\":\"Small Business Online Marketing Solutions\",\"publisher\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.constantcontact.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#organization\",\"name\":\"ConstantContact\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg\",\"contentUrl\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg\",\"width\":300,\"height\":275,\"caption\":\"ConstantContact\"},\"image\":{\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/constantcontact\/\",\"https:\/\/x.com\/constantcontact\",\"https:\/\/www.instagram.com\/constantcontact\",\"https:\/\/www.linkedin.com\/company\/constant-contact\/\",\"https:\/\/www.pinterest.com\/constantcontact\/\",\"https:\/\/www.youtube.com\/user\/constantcontact\",\"https:\/\/en.wikipedia.org\/wiki\/Constant_Contact\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8\",\"name\":\"Alexandra Marinaki\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/image\/593b6dcb3d3209e301de9c348e21bbab\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png\",\"contentUrl\":\"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png\",\"caption\":\"Alexandra Marinaki\"},\"description\":\"Alexandra is a Senior Content Writer with seven years of marketing experience and a background in psychology. She uses that mix to understand what actually makes readers tick, turning their real everyday pain points into practical, educational content and thought leadership. A big fan of personal development and storytelling, she writes to help people learn and grow. When she\u2019s offline, she\u2019s usually admiring art.\",\"url\":\"https:\/\/www.constantcontact.com\/blog\/author\/alexandra\/\"}]}<\/script>\n","yoast_head_json":{"title":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","og_description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","og_url":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","og_site_name":"Constant Contact","article_publisher":"https:\/\/www.facebook.com\/constantcontact\/","article_published_time":"2026-09-22T16:14:59+00:00","article_modified_time":"2026-09-22T16:15:04+00:00","og_image":[{"width":2918,"height":1648,"url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-blog-homepage-2026.jpg","type":"image\/jpeg"}],"author":"Alexandra Marinaki","twitter_card":"summary_large_image","twitter_creator":"@constantcontact","twitter_site":"@constantcontact","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#article","isPartOf":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"},"author":{"name":"Alexandra Marinaki","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8"},"headline":"Privacy Act 2020: What NZ Businesses Need to Know","datePublished":"2026-09-22T16:14:59+00:00","dateModified":"2026-09-22T16:15:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"},"wordCount":2138,"publisher":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"},"keywords":["best practices","compliance","data collection","new zealand"],"articleSection":["Small Business Marketing"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","url":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/","name":"Privacy Act 2020: What NZ Businesses Need to Know | Constant Contact","isPartOf":{"@id":"https:\/\/www.constantcontact.com\/blog\/#website"},"datePublished":"2026-09-22T16:14:59+00:00","dateModified":"2026-09-22T16:15:04+00:00","description":"Learn how New Zealand's Privacy Act 2020 applies to your business. Follow our 5-step compliance plan to protect your data and avoid breaches.","breadcrumb":{"@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.constantcontact.com\/blog\/privacy-act-2020-nz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.constantcontact.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Privacy Act 2020: What NZ Businesses Need to Know"}]},{"@type":"WebSite","@id":"https:\/\/www.constantcontact.com\/blog\/#website","url":"https:\/\/www.constantcontact.com\/blog\/","name":"Constant Contact","description":"Small Business Online Marketing Solutions","publisher":{"@id":"https:\/\/www.constantcontact.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.constantcontact.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.constantcontact.com\/blog\/#organization","name":"ConstantContact","url":"https:\/\/www.constantcontact.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg","contentUrl":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/02\/constant-contact-share-logo-square.jpg","width":300,"height":275,"caption":"ConstantContact"},"image":{"@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/constantcontact\/","https:\/\/x.com\/constantcontact","https:\/\/www.instagram.com\/constantcontact","https:\/\/www.linkedin.com\/company\/constant-contact\/","https:\/\/www.pinterest.com\/constantcontact\/","https:\/\/www.youtube.com\/user\/constantcontact","https:\/\/en.wikipedia.org\/wiki\/Constant_Contact"]},{"@type":"Person","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/9a51bfefe57cf7c95ae2b4032fba41d8","name":"Alexandra Marinaki","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.constantcontact.com\/blog\/#\/schema\/person\/image\/593b6dcb3d3209e301de9c348e21bbab","url":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png","contentUrl":"https:\/\/www.constantcontact.com\/blog\/wp-content\/uploads\/2026\/05\/alexandra-96x96.png","caption":"Alexandra Marinaki"},"description":"Alexandra is a Senior Content Writer with seven years of marketing experience and a background in psychology. She uses that mix to understand what actually makes readers tick, turning their real everyday pain points into practical, educational content and thought leadership. A big fan of personal development and storytelling, she writes to help people learn and grow. When she\u2019s offline, she\u2019s usually admiring art.","url":"https:\/\/www.constantcontact.com\/blog\/author\/alexandra\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/users\/736"}],"replies":[{"embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/comments?post=173750"}],"version-history":[{"count":10,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750\/revisions"}],"predecessor-version":[{"id":174043,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/posts\/173750\/revisions\/174043"}],"wp:attachment":[{"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/media?parent=173750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/categories?post=173750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/tags?post=173750"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/content_type?post=173750"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/industry?post=173750"},{"taxonomy":"feature","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/feature?post=173750"},{"taxonomy":"article_type","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/article_type?post=173750"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.constantcontact.com\/blog\/wp-json\/wp\/v2\/coauthors?post=173750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

How to comply with the Privacy Act 2020 in five steps<\/h2>\n\n\n\nCompliance sounds daunting at first, but it comes down to a few habits you can build into your existing systems. Start with these five steps and adjust them to the size of your operation.<\/p>\n\n\n\n

Step 4: Publish a clear privacy policy<\/h3>\n\n\n\nTell people what you collect, why, and how they can reach you about it. A short, honest policy builds trust and satisfies your transparency duties.<\/p>\n\n\n\n

Key Privacy Act 2020 rules for New Zealand small businesses<\/h2>\n\n\n\nFocus your attention on the rules that carry the clearest obligations and penalties. These are the areas the regulator cares about most, and where mistakes are hardest to undo.<\/p>\n\n\n\n

2. What counts as personal information?<\/h3>\n\n\n\nPersonal information is any detail about an identifiable person, such as a name, email address, mobile number, or payment record. If someone could be recognised from it, the Act treats it as personal information.<\/p>\n\n\n\n

3. What should I do if I have a privacy breach?<\/h3>\n\n\n\nFirst, assess whether the breach has caused or is likely to cause serious harm. If it has, notify the Privacy Commissioner and the affected people as soon as you can. Keep a record of what happened and how you responded.<\/p>\n\n\n\n

How to comply with the Privacy Act 2020 in five steps<\/h2>\n\n\n\n
Compliance sounds daunting at first, but it comes down to a few habits you can build into your existing systems. Start with these five steps and adjust them to the size of your operation.<\/p>\n\n\n\n

Key Privacy Act 2020 rules for New Zealand small businesses<\/h2>\n\n\n\n
Focus your attention on the rules that carry the clearest obligations and penalties. These are the areas the regulator cares about most, and where mistakes are hardest to undo.<\/p>\n\n\n\n

2. What counts as personal information?<\/h3>\n\n\n\n
Personal information is any detail about an identifiable person, such as a name, email address, mobile number, or payment record. If someone could be recognised from it, the Act treats it as personal information.<\/p>\n\n\n\n

3. What should I do if I have a privacy breach?<\/h3>\n\n\n\n
First, assess whether the breach has caused or is likely to cause serious harm. If it has, notify the Privacy Commissioner and the affected people as soon as you can. Keep a record of what happened and how you responded.<\/p>\n\n\n\n