Data protection and cyber security in New Zealand

Bell Gully

The data protection team at Bell Gully advises a range of clients on front-end risk mitigation, including breach response plans, simulations, and training, as well as internal and cyber insurance policies. The group is also noted for its advice to charities, often on a pro bono basis, assisting with a variety of technology and data projects. Furthermore, as AI becomes more prevalent, the team is increasingly instructed on issues related to AI ownership, biometrics, and intellectual property rights. Tania Goatley and Laura Littlewood head the team, with specialisms in technology, data privacy, and cybersecurity issues. Richard Massey is noted for his specific expertise in responding to data and privacy breaches.

Praxisleiter:

Tania Goatley; Laura Littlewood


Weitere Kernanwälte:

Richard Massey; Kristin Wilson


Referenzen

‚Bell Gully’s team is comprehensive; they specialise in delivering. Their team provide incredible support for our significant privacy needs, providing us security in the knowledge that we have the best possible advice.‘

‚The advice that they provide is always explained in detail, ensuring that the decisions we make are well-informed.‘ 

‚Pragmatic and responsive.‘

Highlight-Mandate


Buddle Findlay

Buddle Findlay‘s data protection and privacy team handles a range of matters throughout the practice area. The team has notably increased its engagements with executive boards concerning data protection, cybersecurity, and privacy, alongside growing areas such as data governance and AI. As cyber and data security breaches continue to become more prevalent, the team supports clients in relation to immediate incident response plans through to the implementation of remedial safeguards. The team benefits from the joint leadership of Allan Yeoman and Amy Ryburn, and further includes Keri Johansson, who focuses on data collection, data matching, and transfer, alongside Alexandra Chapman, who provides extensive experience in complicated data protection issues.

Praxisleiter:

Allan Yeoman; Amy Ryburn


Weitere Kernanwälte:

Keri Johansson; Alexandra Chapman


Kernmandanten

New Zealand Post


Ministry of Social Development


Department of Internal Affairs


Ministry of Business, Innovation and Employment


Central Water Plains Limited


Z Energy Limited


Sky Network Television Limited


One NZ


Heart of the City


AstraZeneca


Letterboxd


The University of Auckland


Hospice New Zealand


Zespri


Contact Energy


Toyota New Zealand


Highlight-Mandate


  • Buddle Findlay advised the Ministry of Social Development in relation to a significant technology transformation programme that will materially impact how the Ministry of Social Development interacts with the public and its data processing arrangements.
  • Buddle Findlay advised the New Zealand Defence Force (NZDF) in relation to its procurement and contracting for the procurement of an all-of-government maritime domain awareness system to be used by NZDF.
  • Advised a variety of clients in relation to cyber, privacy, and security breaches.

MinterEllisonRuddWatts

The data protection and privacy team at MinterEllisonRuddWatts demonstrates a broad and deep knowledge of privacy, data protection, and cybersecurity issues. The group is regularly involved in mitigating risks from major data breaches, drafting privacy policies, and advising on data sharing agreements. Richard Wells spearheads the practice, with significant expertise in all areas of privacy and data protection law. Furthermore, June Hardacre advises both public and private sector clients on employee privacy matters, as well as demonstrating expertise in contentious Privacy Act matters. Suzy McMillan brings a wealth of experience representing clients in the technology, media, health, and pharmaceutical sectors in both privacy law and wider technology matters.

Praxisleiter:

Richard Wells


Weitere Kernanwälte:

June Hardacre; Suzy McMillan


Referenzen

‘I primarily worked with Richard Wells of Auckland. Richard quickly understood the issues, but was able to bring in subject-matter experts such Suzy McMillan to research and advise.‘

‘Richard Wells and Suzy McMillan provided commercial and practical advice. Their support was invaluable, particularly at a time when the business was under a great deal of stress. The advice given was measured, calm and excellent.’

Kernmandanten

MediaWorks Holdings Limited


Callaghan Innovation


Bupa Care Services Limited


Precinct Properties Limited


Westpac New Zealand


Mighty Ape Limited


The New York Times


Generate Investment Management Limited


Highlight-Mandate


  • Acted for Mediaworks in responding to one of New Zealand’s largest data breaches, affecting around 400,000 individuals.
  • Acted for Westpac in updating its API Template Agreements to meet the API Centre’s Minimum Open Banking Implementation Plan.
  • Acted for Entain in responding to a personal information request under IPP 6 of the Privacy Act 2020.

Russell McVeagh

Russell McVeagh‘s data protection team acts on a variety of matters, including litigation, as well as commercial and cybersecurity matters, for a range of domestic and international clients. The team is particularly noted for its handling of data protection law and commercial matters, including data and privacy breaches, as well as emerging and new technologies. The practice benefits from a large leadership team, with Liz Blythe and Mei Fern Johnson heading the technology practice and Joe Edwards heading the media and marketing team, specialising in defamation, privacy law, and intellectual property matters. Louise Taylor provides key support in this area.

Praxisleiter:

Liz Blythe; Mei Fern Johnson; Joe Edwards


Weitere Kernanwälte:

Louise Taylor


Referenzen

‚Louise Taylor and Liz Blythe are both extremely skilled in commercial contracts and have an excellent knowledge of data issues.‘

‚Liz Blythe continues to provide trusted legal advice with a commercial perspective.‘

‚Joe Edwards is an exceptional partner to work with. He is highly skilled and experienced in an area of law that is fast-paced and constantly changing.‘

Kernmandanten

Auckland International Airport


Department of Corrections


New Zealand Banking Association


National Australia Bank


Spark


Ministry of Justice


Fire and Emergency NZ


New Zealand Police


Highlight-Mandate


  • Russell McVeagh has been acting for Bremworth in High Court proceedings against Pebblemill Limited in relation to Pebblemill’s alleged use of confidential information.
  • Providing end-to-end legal support to the New Zealand Banking Association („NZBA“) on the establishment of an unincorporated data sharing alliance together with the 13 New Zealand Banks.
  • Providing end-to-end legal support to the New Zealand Banking Association („NZBA“) on the arrangements in respect of the establishment and launch of a Confirmation of Payee („CoP“) ecosystem involving the 13 retail banks in New Zealand.

Dentons New Zealand

Dentons New Zealand‘s data protection and cybersecurity team has a deep and broad understanding of all issues affecting the innovation and technology sector, with expertise in privacy, consumer protection, censorship, and harmful digital communications law. The team is particularly noted for its experience in the public sector, and work handled for local government agencies, on matters concerning cloud technology, big data, and data sovereignty. Hayley Miller heads the team with a particular focus on eCommerce, cloud technology, and the banking sector. Further, Campbell Featherstone focuses on privacy and data protection, procurement, and health information, while Hayden Wilson is noted for his advice to clients in response to privacy breaches, access requests, as well as complaints and investigations.

Praxisleiter:

Hayley Miller; Campbell Featherstone; Hayden Wilson


Weitere Kernanwälte:

Ashleigh Ooi


Referenzen

‚Dentons is really solid in this area and understands the practicalities of the technology work we do, which helps immensely.‘

‚Hayley Miller is excellent, really knowledgeable, responsive and pragmatic.‘

‚The team at Dentons have been top-notch. They are quick to respond, provide useful and commercial advice and have assisted us with various privacy matters.‘

Kernmandanten

Accenture NZ Ltd


Airbnb


Airways Corporation of NZ


Alibaba


Altus Group Limited


Amazon


AMP Services (NZ) Limited


ANZ Bank New Zealand Limited


ASB Bank Limited


Bathurst Resources Group (BT Mining Limited)


BNI Networking & Referral Ireland Holding Limited


Bolt Operations


BT Mining


Bumble


Catalyst IT


Cognizant


Danone Nutricia New Zealand Limited


Downer New Zealand


Footlocker


FutureVerse


Google


HSBC


Institute of Directors


Oji Fibre Solutions


Oranga Tamariki


Pact Group


PayPal Inc.


Qualmark NZ


Serko


Snapper Services Limited


St John New Zealand


Tourism Industry Aotearoa


Tourism NZ


Unison Networks Limited


Warner Music Group


Wellington City Council


Yahoo


Highlight-Mandate


  • Advised Bathurst on Health Information Privacy Code 2020 compliance concerning the health and wellbeing services provided to staff at mines, including preparing consent forms and privacy disclosures.
  • Advised Serko on several aspects of its business, including reviewing its data retention policy and working with Serko in connection with global privacy issues.
  • Undertaking an independent review of Oranga Tamariki’s privacy practices, including the management of personal information.

DLA Piper New Zealand

The technology and data team at DLA Piper New Zealand demonstrates strength in key areas such as data protection and cybersecurity matters, AI implementation and governance, data commercialisation, as well as building cyber-resilience and responding to cyberattacks. With a client base that spans major corporations across various industries, including data-intensive enterprises and highly regulated sectors, the team is well-positioned to advise clients on a range of matters. Nick Valentine heads the practice, with a practice that focuses on data protection and cybersecurity law. Edward Eisdell-Moore provides key support in this area.

Praxisleiter:

Nick Valentine


Weitere Kernanwälte:

Edward Eisdell-Moore


Kernmandanten

Foodstuffs North Island Limited


FMG Insurance


Frankie Technologies Limited


Highlight-Mandate


Hudson Gavin Martin

Hudson Gavin Martin specialises in technology, media, and IP matters. The data protection offering at the firm is focused on disruptive technologies and businesses, with expertise across various sectors, including telecoms, fintech, digital health, and e-commerce. The team is regularly engaged by both providers and users of technology and data solutions for its in-depth understanding and expertise throughout the market. Simon Martin heads the practice and brings expertise in commercialising data, while Edwin Lim is noted for his work in cyber-risk matters.

Praxisleiter:

Simon Martin


Weitere Kernanwälte:

Edwin Lim; Anchali Anandanayagam; Tim Mahood; Samuel Choi


Referenzen

‚Edwin is a cool, confident advisor during a crisis.‘

‚Hudson Gavin Martin’s specialist focus on technology provides clients with deep industry knowledge and practical, commercially-oriented legal advice.‘

‚I have been impressed with Simon Martin’s consistent ability to be more than just a legal advisor; he has become a strategic partner deeply invested in his clients‘ success.‘

Kernmandanten

Vector


Cucumber Ltd


Dromorne Group


Television New Zealand Limited (TVNZ)


Milford Asset Management


Foodstuffs North Island


Xero


Loyalty Solutions Limited


Bank of New Zealand


One New Zealand


Highlight-Mandate


  • Advised Television New Zealand on the procurement and implementation of its business-critical streaming platform, including the protection of the vast data ingested by the platform.
  • Advised Foodstuffs North Island on the trial of its facial recognition technology (FRT) in its stores to see if the technology can assist in reducing the increasing risks to the safety and security of its individuals and property.
  • Advice to One New Zealand in relation to the inclusion and use of AI technologies across its business and the impact of this, including in relation to data and privacy issues.

Simpson Grierson

The privacy and data team at Simpson Grierson operates across all areas of the market, providing advice on the full spectrum of data-related legal issues, from regulatory compliance to response to cyberattacks and ransomware demands. The firm demonstrates particular strengths in crisis management, managing data breaches, and litigation arising out of cybersecurity and data disputes. Karen Ngan co-heads the practice, with a focus on working with users and suppliers in the technology sector, alongside Jania Baigent, who has extensive experience in media and information law. The team further included Sally McKechnie, who is noted for her strength in advising clients on privacy issues, and Anita Birkinshaw, who regularly handles matters related to data breaches.

Praxisleiter:

Karen Ngan; Jania Baigent


Weitere Kernanwälte:

Sally McKechnie; Anita Birkinshaw; Michelle Dunlop


Referenzen

‚Very practical and efficient.‘

‚Practical and efficient, and provide solutions that can be implemented.‘

Kernmandanten

ASB


BP


Briscoe Group


Bunnings


Eisai Europe Limited


Fonterra


Footlocker


Grizzly Software


Gymnastics New Zealand


Health New Zealand – Te Whatu Ora


Metservice


Ministry of Justice


Motor Trade Association


Australasian Automotive Business Solutions Limited


MUFG Limited


New Zealand Rugby


Secure Parking Limited


Sephora


Shudder


Tamaki Regeneration Group


TCF Financial Corporation


Te Wananga o Aotearoa (TWoA)


Te Whakakitenga o Waikato Inc (Waikato Tainui)


The New Zealand Health Group


Watercare Services Limited


Highlight-Mandate


  • Acted for New Zealand’s public health service in obtaining urgent injunctive relief against the use of confidential health information taken from the national vaccination database.
  • Advised two large retail groups on the privacy implications of deploying AI-enabled technologies (including facial recognition technologies) in stores.
  • Advised several leading car manufacturers on data protection matters relating to connected car services and autonomous vehicle testing.