Cabinet Paper Reforming the Privacy Act 1993 [pdf, 360 KB]
...tier regime requiring: • for material breaches – notification to the Commissioner; • for serious breaches – notification both to the Commissioner and the affected individuals when there is a real risk of harm; 5.2. enhanced own motion investigations – strengthening the Commissioner’s existing own motion investigation powers to investigate emerging issues before serious harm occurs and for proactive assessment of agencies’ systems and practices where privacy concerns ha...