Trust is built on how you handle data

In a modern world, data and privacy touches almost every part of how a business operates. Your customers, investors and regulators will judge you on how your business manages data and privacy.
We help clients navigate this landscape by exploring what types of data your business processes, what are your privacy and data risks and concerns, and building privacy and data protections that focuses on what matters most for you.

We are experts on the New Zealand Privacy Act 2020 and how to comply with it, including drafting compliant privacy policies and advising on privacy breaches and engagement with the Office of the Privacy Commissioner.

Of course, data doesn’t respect borders, and neither do our clients. We regularly advise clients on the international dimensions of privacy and data protection too, including on how regimes like the GDPR and other overseas frameworks interact with their business wherever their data travels or comes from.

Our work spans the full privacy and data lifecycle, including drafting privacy policies and data processing agreements and advising on data security and breach protections in commercial contracts, regulatory compliance, and data breach and incident responses.

Our recent experience includes:

• advising an offshore parent on a suspected notifiable data breach, including on contractual and regulatory requirements and processes related to that breach;
• drafting GDPR-compliant (including UK GDPR-compliant) data processing addenda;
• drafting inserts for inclusion in privacy policies related to regulatory requirements under  offshore regimes like GDPR, UK GDPR, and the California Consumer Privacy Act (CCPA);
• negotiating security and data protection addenda for inclusion in major institutional customer contracts, including with banks, telcos, insurers and energy companies; and
• advising on compliance with the offshore data transfer requirements of the New Zealand Privacy Act, including the implications of use of offshore third party AI services.