Privacy Law Basics: What Happens to Your Data

Every account you open, every form you fill and every service you use collects information about you — and privacy law is the quiet set of rules governing what they may do with it. In New Zealand the Privacy Act 2020 rests on thirteen Information Privacy Principles: agencies must collect only what they need, tell you why, keep it secure and use it only for the purpose they gave you. Australia, the UK and Europe run their own strong frameworks under different names. This guide covers the practical core: what businesses must do with your data, your right to access and correct what they hold, how breach notification works when things go wrong, and the honest limits of what privacy law does and does not protect. The strongest privacy protection is still your own choices about what you share — and knowing your rights turns a vague unease into concrete, usable requests.

⚡ Free instant check

The plain-language basics of privacy law — what businesses must do with your data, your rights to see and correct it, how breach notifications work, and the honest limits of what the law protects.

Answer 0-10 (10 = the stronger end for every question — no wrong answers). Your answers stay on this device — nothing is stored.

If a product you bought failed or a service was poor, do you know the basic order — ask the trader first, name the guarantee, escalate calmly?

I would just take the loss — 5 — I know the steps and the remedies

Do you keep the paper trail that rights claims run on — receipts, messages, photos, dates — before problems happen?

I never keep receipts — 5 — Receipts and notes filed as I go

Do you know the honest boundaries of your rights — what is not covered (wear and tear, misuse) and when a situation needs a lawyer or community law centre?

I assume everything is covered — 5 — Limits clear and respected

Do you know where free, trustworthy legal help lives in your area — community law, government services, JP appointments?

No idea where to start — 5 — I know the doors and the numbers

Why it matters

Privacy law in New Zealand is built on thirteen Information Privacy Principles that apply to how agencies collect, use, store and share personal information: they must collect only what they need, tell you why, keep it secure, and not use it for unrelated purposes — Australia, the UK and the EU have their own similar frameworks with their own names.
Your core rights are practical: you can ask any agency what personal information they hold about you and get a copy, you can ask for it to be corrected, and they must respond within a set time (20 working days in NZ) — a request does not need to be fancy, just in writing.
Data breaches now have a notification duty in many places: in New Zealand an agency that has a privacy breach causing serious harm must notify the Privacy Commissioner and affected people — which is why a company suddenly emailing you about a hack is not just politeness, it is the law.
The honest limits: privacy law protects against misuse of your information, not against every annoying data practice — marketing you did not ask for, cookies and targeted ads are mostly governed by other rules — and the strongest practical protection is still what you choose to share and with whom.

Your checklist

Know what you handed over: keep a rough map of the accounts and services holding your data.
Use your access right once a year: ask the two or three agencies that matter most what they hold on you.
Correct what is wrong: an error on your file can quietly affect credit, insurance and checks for years.
Turn on the boring security basics: unique passwords, two-factor login and alerts on the accounts that matter.
Read the breach emails: when a service you use is hacked, check what data was involved and act if it was sensitive.
If a business mishandles your data and will not fix it, complain to the privacy regulator in your jurisdiction — it is free and it works.

❓ Privacy Law Basics: What Happens to Your Data — FAQ

How do I ask a company what data they hold on me?

You write to them — a simple message asking for a copy of the personal information they hold about you, sent to their privacy officer or contact address. In New Zealand they must respond within 20 working days, and in most jurisdictions an access request cannot be refused without a lawful reason. Keep a copy of your request and the date; if they ignore it, the privacy regulator in your jurisdiction is the next stop.

Do companies have to tell me about data breaches?

In many places, yes — in New Zealand an agency must notify the Privacy Commissioner and affected people when a breach is likely to cause serious harm, and Australia and the EU have similar mandatory notification rules. A breach email from a service you use is therefore worth reading: check what data was involved, change affected passwords and watch for the follow-on scams that always trail a big breach.

Does privacy law stop companies from selling my data?

It regulates how they can — collection must be for a lawful purpose you were told about, and using or disclosing data for something substantially different usually breaches the rules. But marketing preferences, cookies and targeted advertising are largely governed by separate consumer and spam rules, so the practical toolkit is reading consent boxes, opting out of marketing and using privacy settings, alongside the legal rights this guide covers.

More know your rights tools

Consumer Guarantees Basics: When a Thing Lets You Downfree Tenancy Rights Basics: What Landlords Must Dofree Employment Rights Basics: Fair Work 101free Police & Your Rights Basics: Calm Encountersfree Defamation Basics: Reviews, Posts and Reputationfree

📜 All legal tools

Every tool answers instantly from our own knowledge and calculators — no AI wait, no account. Plain-language, educational general legal information about the everyday basics: tenancy and employment rights, consumer guarantees, police and your rights, privacy law, defamation and online reviews, neighbour law over fences, trees and noise, a simple contract review checklist with red-flag scoring, buying a car privately with a real-cost check, debt payoff planning, dispute resolution options compared by cost and time, community legal help and JP services, small business legal basics, a sole trader vs company structure check, copyright basics for creators, family law with a kind hand, wills and powers of attorney, and the honest risks of DIY legal documents. Each tool states its limits plainly: this is general information, not legal advice, laws vary by jurisdiction, and for a real situation the tool points you to a lawyer or community law service. Nothing you type is stored. Results are estimates and learning aids, not advice. Want the deeper, personalised version? Each has a $2.95 full report.

✦ Know Your Rights

Consumer Guarantees Basics: When a Thing Lets You Downfree$2.95 Tenancy Rights Basics: What Landlords Must Dofree$2.95 Employment Rights Basics: Fair Work 101free$2.95 Police & Your Rights Basics: Calm Encountersfree$2.95 Privacy Law Basics: What Happens to Your Datafree$2.95 Defamation Basics: Reviews, Posts and Reputationfree$2.95

✦ Deals, Debt & Disputes

Simple Contract Review: Red-Flag Checklistfree$2.95 Neighbour Law Basics: Fences, Trees & Noisefree$2.95 Buying a Car Privately: Real-Cost Checkfree$2.95 Debt & Collection: Payoff Plannerfree$2.95 Dispute Resolution Options: Cost & Time Comparefree$2.95 Community Legal Help & JP Services Finderfree$2.95

✦ Business & Life Events

Sole Trader vs Company: Which Structure?free$2.95 Small Business Legal Basics: Stay Out of Troublefree$2.95 Copyright Basics for Creators: What Is Yoursfree$2.95 Family Law Basics: Separation with a Kind Handfree$2.95 Wills & Powers of Attorney Basicsfree$2.95 Legal Document DIY: Risks & When to Payfree$2.95

All tools About Contact Privacy Terms phyrenix.com engineshelf.com WebPropertyX Bespokes Stock Analyzer Pro ClientTell

Educational general legal information only — not legal advice, and never a promise about any outcome. Laws vary between countries and states, this hub does not know yours, and the everyday basics here are starting points, not answers for a real case. For your situation, see a lawyer, a community law centre or the right free service — the tools point the way. Refunds honoured.
© 2026 Legal Hub · part of the phyrenix.com network · WebMCP manifest · tools.json

Legal answers that make the law feel less scary.

Privacy Law Basics: What Happens to Your Data

⚡ Free instant check

Why it matters

Your checklist

❓ Privacy Law Basics: What Happens to Your Data — FAQ

More know your rights tools

📜 All legal tools