Lead signal
Two named New Zealand decisions in one stretch say the same thing: the Privacy Commissioner is naming names, and reasonable safeguards plus vendor oversight are the tests. Both are system questions before they are policy questions.
Show radar
Regulatory radar overview
Angle shows the regulatory category, distance from the centre shows when it bites, and size and colour show severity. Select a numbered signal to read its detail.
The complete radar is fitted to your screen below. Open the larger view to zoom in and inspect individual signals.
Regulatory changes on the radar
Health data breach findings landed
- Who it affects
- financial services firms holding sensitive personal information, and anyone whose vendors hold it for them
- What it can disrupt
- security safeguards that would not survive a post-breach inquiry into whether they were reasonable
- Why it matters now
- Phase 1 found Privacy Act breaches in May. Compliance notices are coming and Phase 2 is next.
Outsourcing does not outsource accountability
- Who it affects
- firms whose contractors touch customer data: identity checks, surveillance, collections, support
- What it can disrupt
- vendor contracts and oversight that leave privacy obligations implied rather than enforced and monitored
- Why it matters now
- decision published and the stores named. The principle applies well beyond retail.
Compiled with care from public sources; errors and omissions excepted. Always check the linked source before acting. Regulatory Radar is general information, not legal or compliance advice.