FutureFive New Zealand logo
Consumer technology news from the future
Story image

The GDPR and NZ: Why this relationship is so important to the future of data privacy in Aotearoa

By Mitchell Hageman
Mon 29 Nov 2021

In 2018, a new unprecedented data privacy law took the EU and, by association, the rest of the world by storm. The GDPR (General Data Protection Regulation) in its own words is described as "the toughest privacy and security law in the world," and it's safe to say the impact it has had on the global tech and business sectors has been significant over the past four years. 

With more and more NZ companies subject to data and security breaches, it also begs the question as to whether there needs to be more focus on our own data privacy laws and if we can look to other countries for guidance.
 
With the pandemic in 2020 initiating an increased online presence in all areas, companies have had even more reason to strengthen their data security systems and protocols as regulations continue to come with heavier penalties and consequences should they be breached. 

Another significant factor is that the laws also cover affiliate companies, meaning that they don't only affect the EU market but also those international companies under EU jurisdiction.

Pre-pandemic, Google was famously hit with a substantial GDPR fine of EUR €50 million in 2019, when it failed to make its consumer data processing statements easily accessible to users. It also came under fire for data mining its users for targeted advertising campaigns without seeking consent, a trend becoming more apparent as companies look for new ways to expand their market growth. 

More recently, in 2020, British Airways was targeted by hackers who breached their security and led customers to a fraudulent site that compromised the personal and financial information of about 400,000 people.

These substantial law changes have come at a cost too. According to legaljobs.io, it was reported that 27% of companies spent over half a million dollars to become GDPR compliant, and there has been over EUR €359 million in major fines already issued. This number is expected to grow, with some companies apparently struggling to keep up with the ever-changing online climate.

Rob Ellis of tech company Thales spoke to the BBC in May 2021, telling them that "When GDPR was first drafted, the legislation did not necessarily account for the adoption of new technologies and rapid migration to the cloud brought on by the pandemic.

"In this remote working era, businesses needed to digitally transform almost overnight just to keep the lights on, without necessarily incorporating security in the design of new systems and processes."

So if companies are struggling internationally to implement processes, how does this fare in the NZ market? 

If New Zealand businesses have dealings with or are based in the EU, then they must adhere to the rules set out in the GDPR 2018 while also following the NZ Privacy Act 2020 guidelines. That's a lot of information coming from many different places, but thankfully the NZ government's digital website specifies that it is likely for there to be a significant crossover between the two.

With two different sets of rules and a myriad of new technologies and systems to navigate, it's clear that businesses must now be more vigilant than ever to keep up.

University of Auckland commercial law professor, Gehan Gunasekara, says that companies would be wise to make sure they know the European laws well, and if companies invest in smart solutions and education relating to GDPR, then they will be better protected in the long term.

"If you meet the European requirements, then 99.9% of the time you're most likely to also meet the New Zealand requirements. There are some subtle differences between the two regimes, but for most businesses, that doesn't really become an issue."

He says the most difficult situations come with doing business in and with Europe, and this is where companies have to carefully consider all the steps necessary to comply with the GDPR.

"Let's say, for example, you're a tourism operator and you want to bring Europeans to New Zealand or are offering flights to Europe, then you have to comply with the GDPR.

"It's now more than just about being transparent, and a bit more than consent. There is the idea that if you get specific explicit consent, everything is okay, but that's not the way the GDPR works. It is kind of the way that New Zealand's privacy law works because most things can be agreed to by consent under New Zealand law, but in the GDPR consent is not solid grounds on which you can base processing of personal data."

He says that the European GDPR is based on the legitimacy of interest, and companies have to explicitly outline how they're going to keep their data safe.

"You've got to show you have a legitimate interest and you've got to show that the individual's interest's don't override it. You've also got to show you're taking necessary steps to protect the data. Even if an individual signs some kind of waiver or consent, under GDPR, that's not going to get you off the hook."

Another issue Gunasekara brings up is education. He believes that even if companies equip the best tools and systems, humans are the key to regulating GDPR compliance and should be a key investment.

"The Privacy Commissioner in New Zealand can only give limited assistance as far as the Europeans laws are concerned."

Recently this year, Gunasekara and his team at the University of Auckland launched a program specifically targeted at companies and workers wanting to upskill in the areas of GDPR and data protection.

"We have a brand new online programme called the master of information governance that was launched this year. The idea is to train and upskill people who are privacy officers, information officers and governance officers.

"The advantage is if an organisation were to send its staff to a programme like that, then those staff can train other staff within the organisation and so there's a cascade effect."

When discussing our data privacy regulations compared to the rest of the world, he believes we are in the middle of the road when it comes to developed countries.

"There are many countries around the world that have yet to get privacy regulation. I mean, China is the latest one that has actually now passed quite a strict personal information protection law. Almost every week, there's another country passing a privacy law.

"We think we're weak in comparison to the GDPR, but even in relation to Australia for example, where small businesses are not covered, New Zealand has a good one size fits all law that's relatively easy to understand."

When asked what businesses should do to be prepared for GDPR compliance, along with education, Gunasekara emphasised the need for a company-wide approach, with all employees doing their part to protect data.

"There is really no excuse for business not to get up to speed with it, and it can't be something that can be just dedicated to some compliance officer or privacy officer. It requires an all business approach. This needs to be grasped at board and CEO level and there are cost implications, but the costs of privacy failures would be higher.”

With new privacy laws popping up by the day, and a large majority of businesses worldwide being subject to data breaches regularly, it's clear that data privacy isn't something companies should sweep under the rug. GDPR and privacy laws are there to protect businesses and consumers, not hinder them, so it's in their best interest to make sure they are up to speed. 

Do we need a brand new, state-regulated GDPR that is NZ specific? Perhaps it's too early to tell. With so many of these new laws around the world being in their infancy, the full effect hasn't come to light.

With noticeable fines and a focus on enhancing secure technology, we've seen many companies stung and others learn from their mistakes, so this may be an early indicator of change. However, it is clear that the European GDPR is a landmark initiative that New Zealand and the rest of the world should be keeping closely on their radar.

Public Interest Journalism Fund logo
Public Interest Journalism funded through NZ On Air.
Related stories
Top stories
Story image
Malware
Research shows attacks on the gaming industry are getting worse
Web application attacks in the gaming sector have grown by 167% from Q1 2021 to Q1 2022, according to new research from Akamai.
Story image
Phishing
Norton research finds NZ threat landscape diversifying on social media
Norton's quarterly report has highlighted the seriousness of the threat landscape in New Zealand.
Story image
Tablets & laptops
Hands-on review: Xencelabs Graphic Display Tablet
Xencelabs seemed to show up out of nowhere on the market. I had no idea who they were or what they were about, but I was very intrigued.
Story image
Tablets & laptops
Chromebook and tablet shipments see another rapid decline for the year
According to research from Canalys PC Analysis, Chromebook and tablet shipments have fallen for the fourth quarter in a row for Q2 of 2022.
Story image
Gaming
Chorus announces Hyperfibre sponsorship deal with NZ Esports
Chorus has put its support behind New Zealand's Esports community with a newly announced three-year Hyperfibre sponsorship deal with NZ Esports.
Story image
Wireless
Hands-on review: James Donkey RS4 Knight Wireless Gaming Keyboard
I have always liked mechanical keyboards, and this is no exception. I find the action much easier to use than the modern keyboards with limited travel.
Story image
Printers
Comedy legend Jimeoin fronts Epson advertising campaign in NZ and Australia
According to Epson the company’s EcoTank models now account for 74% of all printers sold in the category in New Zealand, alone.
Story image
Gaming
Logitech G’s new Aurora collection looks to help change gaming stereotypes
The company’s new Aurora collection is designed to be gender inclusive, not gender exclusive, addressing the needs and wants of women gamers while also still appealing to a wider general audience.
Story image
STM
Hands-on review: STM ChargeTreeGo portable wireless charger
We get our hands on the ultimate charging accesory for roadwarriors with a bunch of Apple devices.
Story image
Wireless
Hands-on review: Jabra Engage 55 wireless headset
We get our hands on a German design professional headset that many knowledge workers could benefit from.
Story image
Review
Hands-on review: TCL 30 SE mobile phone
TCL continues to provide consumers with budget phones that still pack a punch with the TCL 30 SE mobile phone. 
Story image
Gaming
Game review: Klonoa Phantasy Reverie Series
If there's something missing in today's gaming industry, it's the wonderful discovery of finding new games for hire at your local video rental store. I remember my family hired out the first Klonoa game for the PSOne back in 1997, and it was a blast to play as a kid.
Story image
Gaming
Hands-on review - Xbox Cloud Gaming
I've had the opportunity not just to access the game pass but also its new shiny feature, Xbox Cloud Gaming. In this review, we'll be deep-diving into just what Xbox Cloud Gaming is, how it works and, well, if it works.
Story image
Gaming
Hands-on impressions with PlayStation Plus Deluxe
Finally, the new PlayStation Plus subscription tiers are available now to both New Zealand and Australian PS5 and PS4 gamers.
Story image
Smartphone
Xreart Studio - Turning old masterpieces into new ones
Xreart now specialises in transforming pre-loved smartphones, smartwatches and handheld game consoles into artistic conversation starters for your office, studio or man cave.
Story image
Projector
Hands-on review: BenQ GV30 portable projector
The BenQ GV30 is a portable projector that excels in many aspects but comes up short in a couple of others.
Story image
Tablets & laptops
Hands-on review: HP Evo Spectre X360 Flip Ultrabook 13.5” laptop
The Spectre comes with a keyboard that makes working for long hours something to be looked forward to. It has to be one of the best keyboards I have seen on a 13.5” laptop.
Story image
Internet
InternetNZ appoints new chief executive. Will take over in October
InternetNZ has announced the appointment of its new chief executive, with Vivien Maidaborn taking over the role from interim chief Andrew Cushen in October.
Story image
Netsafe
Major media companies sign new online safety framework for Aotearoa
A new joint development between Netsafe and some of the world's leading social media companies is set to provide Kiwis with safer online experiences.
Story image
Cryptocurrency
Freelance tech jobs boom, NFTs and crypto plunge following crash
"Jobs for NFTs and crypto have dominated the past few quarters of our Fast 50 report, but as you can see they're now falling sharply."
Story image
Gaming
Game review: Disgaea 6 Complete
Disgaea 6: Defiance of Destiny originally came out in 2021, and more than a year later, the game has now been re-released.
Story image
Dark web
Deep web vs dark web: NortonLifeLock explains the difference
NortonLifeLock managing director for APAC Mark Gorrie explains what you need to know about the deep and dark web and the pros and cons of both.
Story image
Wireless
Wave Audio spices up portfolio with first ever party speaker
Australian-based pioneers Wave Audio are enhancing their extensive range of groundbreaking new audio products by adding one of the most versatile speakers on the market to their growing portfolio.
Story image
Gaming
Everything we know so far about NBA 2K23
As excitement for the next iteration of 2K Games’ NBA basketball series builds, some new information on the upcoming game, NBA 2K23, has been released.
Story image
Gaming
Hands-on review: SteelSeries Arctis Nova Pro gaming headset
SteelSeries, being no stranger to creating premium gaming peripherals, sent over its Arctis Nova Pro wired headset kit for us to take a look at.
Story image
Cybersecurity
Online bullying, harassment skyrockets since COVID outbreak
Harmful content reports have risen by over 25% since the outbreak of the COVID pandemic, according to Netsafe.
Story image
i-PRO
I-Pro officially marks launch of brand in Australia and New Zealand
I-Pro has officially launched in Australia and New Zealand, following a series of new releases as an entity that started in early April.
Story image
Fibre
Orcon brings faster fibre to Christchurch with Hyperfibre offering
Orcon has today launched the next generation of fibre speeds in Christchurch, bringing its Hyperfibre offering to the city.
Story image
Gaming
Game review: Wreckfest (Nintendo Switch)
Wreckfest is a fun racing game that came out for multiple different gaming platforms a few years ago. One of the best things about the game is that it's relatively cheap to buy if you own a PS4 or Xbox One console.
Story image
Phone
Hands-on review: Obsbot Me AI-powered mobile phone mount
The Obsbot Me is an independently controlled portable mobile phone mount that can track its target without the need for software or a connection to a phone.
Story image
Wireless
Wave Audio delivers ultimate immersion with new wireless earbuds
Wave Audio, one of Australia's best new audio brands, has recently released a set of landmark noise-cancelling true wireless earbuds, the Immersive Pro.
Story image
Planning
Digital key for smart investment in public infrastructure for NZ cities
Major public infrastructure projects can better manage risks of cost overruns and delays if they deploy data and digital tools at the earliest planning stages.
Story image
Cryptocurrency
Crypto app downloads down as market crashes - report
It appears the mass FOMO around crypto investing may be wearing thin with new data revealing a noticeable drop in crypto app downloads this year.
Story image
ASB
New ASB campaign helps young people better understand money
ASB is helping 18 to 24-year-olds take advantage of financial possibilities and better understand the world of money.
Story image
Gaming
Hands-on review: SteelSeries Apex Pro Mini Keyboard
SteelSeries has taken the design of its range of Apex keyboards to create a smaller version, the Apex Pro Mini. Techday’s Darren Price checks it out.
Story image
Networks
2degrees launches 13 new 5G coverage areas, network upgrades
2degrees has announced it has launched 13 new 5G areas in June, as the company continues its 5G rollout and investment.
Story image
Review
Hands-on review: Logitech Astro A10 Gen 2 wired headset
We get our hands on this incredibly good value for money headset for use in wired environments.
Story image
Malware
Minors using Discord servers to spread malware for cash
Avast has discovered an online community of minors constructing, exchanging and spreading malware, including ransomware and a mix of information stealers and cryptominers.
Story image
Virtual Reality / VR
Virtual reality app reduces phobias through NZ trial
"With this VR app treatment, trialists had increased control in exposure to their fears, as well as control over when and where exposure occurs."
Story image
Cloud
Microsoft and Auckland Transport announce new cloud agreement
Auckland Transport (AT) and Microsoft have announced a new cloud agreement aimed at promoting innovation, reducing costs and improving sustainability in transport services.
Story image
VPN
Hands-on review: Norton Secure VPN
Norton is obviously serious about your privacy. They have a “No-log” policy, which simply means that they do not track or store any of your on-line activities.
Story image
Gaming
Game review: The Elder Scrolls Online: High Isle
This year's major expansion to The Elder Scrolls Online, Zenimax Online's acclaimed massively multiplayer online role-playing game, takes players to the land of the Bretons: High Isle.