Source: Office of the Privacy Commissioner
Building privacy into your organisation not only means you meet your obligations under the Privacy Act 2020, but also builds trust with your customers – that’s the message from the Office of the Privacy Commissioner’s (OPC) latest Insights Report.
At the end of 2022, the Office of the Privacy Commissioner (OPC) and business.govt.nz ran a Small Business Privacy Awareness Survey and 386 small businesses responded. The Office also reviewed 1487 breach reports to the Office to draw insights about small businesses and privacy.
Privacy breaches, whether caused through a malicious act, human error, or system malfunction, work to erode trust in businesses, and cause the business to miss out on growth and new customers.
Privacy Commissioner, Michael Webster said, “While businesses showed they understood personal information and privacy issues they didn’t always have relevant privacy policies and procedures in place.”
“We identified four key insights from our work and explored those with the aim of helping small businesses better meet their obligations under the Privacy Act 2020.”
These insights are:
- Understanding privacy does not necessarily translate into good privacy practices.
- What business sector you are in can increase your privacy risk.
- Businesses need systems for giving people their own information, promptly.
- Whether a business is big or small, the privacy breach risk is about the same.
“The insights, coupled with our breach reporting and real-life examples, should help small businesses grow and develop their understanding of privacy within their business,” Mr Webster said.
“Ensuring good privacy practices are built into businesses from the start is vital,” says Mr Webster.
