OPINION
IMHO: Ensure third parties are safe with your data
Directors should require ISO/IEC 27001-certified partners for customer data handling.
When New Zealand’s current Privacy Act became law in 1993, the way we lived and worked was vastly different to today. Now, we spend most of our lives online and our information is collected by organisations both here and around the world.
To keep up with these changes, our privacy laws are finally being brought into the 21st century. The new Privacy Act is set to come into effect in December and the updates include the introduction of compliance orders, criminal offences and fines if you don’t comply, mandatory notification of harmful privacy breaches, and new controls on disclosing information overseas.
So what do you need to do? You may need to make changes to your processes or systems to comply with the new laws. See this video on what executives and directors need to know.
For further resources from Kordia and Aura Information Security, including videos, checklists and guides, visit the Privacy Act 2020 Resource Hub