Bell Gully’s Auckland-based team handles the full spectrum of data protection and privacy work, from compliance advisory to management of data breaches, disputes and responses to ransomware attacks. Team co-head Laura Littlewood is a tech partner; her portfolio of work includes advising on major ICT procurements and on the regulatory aspects of data protection and security matters. Fellow co-head Tania Goatley is a seasoned litigator who is well-placed to advise on the Privacy Act 1993. At associate level, Kristin Wilson frequently handles cases concerning the improper sharing of confidential or personal information with third parties. Regulatory specialist Richard Massey frequently provides advice on product development, whilst Sarah Brougham assists with responses to requests for information under the Privacy Act.
Data protection and cyber security in New Zealand
Bell Gully
Responsables de la pratique:
Laura Littlewood; Tania Goatley
Autres avocats clés:
Kristin Wilson; Richard Massey; Sarah Brougham
Les références
‘Switched-on, personable and responsive.’
Principaux clients
Air New Zealand
Antares Restaurant Group
ASB Bank
Costco
Genesis Energy
Heartland Bank
Illion
Netflix
The Network for Learning (N4L)
New Zealand Lotteries
Next Generation Critical Communications
One NZ
Woolworths New Zealand
Principaux dossiers
- Advised Crown Infrastructure Partners on the Next Generation Critical Communications Public Safety Network project to deliver communications technology and equipment for emergency services across New Zealand.
- Advised New Zealand Lotteries Commission (Lotto) on the procurement process and contract with a new gaming system provider.
- Advised Costco on its preparations for the opening of its first Costco Wholesale Warehouse in the New Zealand market, including on technology and payment agreements.
Buddle Findlay
Notable areas of recent activity for Buddle Findlay’s data protection and privacy team include advising on data protection and cyber security issues in tech and commercial services agreements; assessing and responding to cyber and privacy breaches; honing clients’ internal privacy; as well as advising on related risk policies and practices. Auckland-based Allan Yeoman who is well-placed to advise tech start-ups on privacy issues and data collection, co-leads the practice alongside Amy Ryburn, whose Wellington-based practice includes advising on issues relating to the transfer of data offshore. Also in Wellington, Renee Stiles specialises in drafting and negotiating complex ICT and outsourcing contracts, while senior associate Alexandra Chapman has a proven track-record advising on data protection issues in both New Zealand and the UK. In Auckland, special counsels Keri Johansson and Catherine Miller are further names to note.
Responsables de la pratique:
Allan Yeoman; Amy Ryburn
Autres avocats clés:
Renee Stiles; Alexandra Chapman; Catherine Miller; Keri Johansson
Les références
‘The Buddle Findlay team is incredibly well-versed in the current status of the health system, as well as having a deep understanding of historical issues in the sector.’
‘My go-to person is always Catherine Miller because she has huge expertise across the health sector, including regulatory issues. I can also trust Catherine to work effectively with team members in all the clinical areas of our business, so that projects can be delivered in accordance with sound legal and regulatory practice.’
‘Buddle Findlay is a firm with broad and deep commercial expertise. I have worked with them on behalf of higher education and global sales and marketing firms and have found their knowledge, capabilities and commercial pragmatism refreshing. Their knowledge of GDPR and data privacy in the Asian region is exceptional.’
Principaux clients
Waka Kotahi NZ Transport Agency
New Zealand Post
Ministry of Business, Innovation and Employment
Te Whatu Ora
Department of Internal Affairs
Wellington City Council
Tertiary Education Commission
Lygon
New Zealand Blood and Organ Service
Sky Television
One NZ (formerly Vodafone NZ)
Bank of New Zealand
The University of Auckland
Principaux dossiers
- Advised Waka Kotahi NZ Transport Agency on privacy and data protection matters concerning the development and procurement of a nationwide open loop public transport payment system.
- Advised the Ministry of Business, Innovation and Employment on its procurement of its foundational technology and telecommunications services from Datacom and Vodafone.
- Acting for Te Whatu Ora in an Employment Court case where the employer had relied on social media posts containing religiously intolerant, political, and anti-COVID vaccination information to dismiss the employee.
Russell McVeagh
Banks, insurers and government agencies turn to Russell McVeagh for assistance with matters ranging from establishing data protection strategies and frameworks across various platforms, to those including data breach management. The team also advises clients on GDPR and regulatory compliance. The unit is additionally handling a growing number of litigation cases concerning injunctions used to protect data. A trio of partners head up the team, being Auckland-based commercial litigator Joe Edwards who has a proven track record handling high-profile privacy, data and confidential information cases; tech specialist Liz Blythe who has longstanding experience advising on privacy and data protection law considerations; and Wellington-based practitioner Mei Fern Johnson who is well-placed to advise on IT outsourcing arrangements. Special counsel Louise Taylor has a focus on tech contracts and operates from the firm’s Auckland office.
Responsables de la pratique:
Joe Edwards; Mei Fern Johnson; Liz Blythe
Autres avocats clés:
Chris Curran; Louise Taylor; Mark Campbell
Les références
‘Liz Blythe is an industry leader with her advice and team. She has an ability to understand an issue very quickly, to provide clear legal advice and tailor it to the issue. She has a strong commercial lens and knows what constraints businesses have.’
‘Mei Fern Johnson is my main contact at Russell McVeagh and she is excellent to work with.’
‘In terms of what makes this practice unique, it’s the deep understanding the team have of the regulatory landscape and relationships with regulators in this space.’
Principaux clients
Bremworth and Cavalier Corporation
Spark
Auckland International Airport
Kiwi Property
Ford
QIC Private Capital
Principaux dossiers
- Acting for Bremworth and Cavalier Corporation in its High Court proceedings against Pebblemill and Mr Radford in relation to Pebblemill’s alleged use of confidential information.
- Advised QIC Private Capital on its acquisition of 50% of Vector Limited’s New Zealand and Australian metering business.
Dentons New Zealand
Trading banks, tech companies and household name brands are among the clients who trust the ‘vastly experienced practitioners’ at Dentons New Zealand with mandates ranging from advising on the implications of New Zealand e-commerce regulations, to advising on compliance with privacy laws and regulatory frameworks such as BS11. Campbell Featherstone and Hayden Wilson oversee matters from the firm’s Wellington office. Featherstone frequently works at the nexus between health information and data privacy, whilst Wilson is a key contact for privacy breach responses. The third co-head Hayley Miller applies her trade in Auckland and is well-placed to advise clients on their use of big data.
Responsables de la pratique:
Hayley Miller; Campbell Featherstone; Hayden Wilson
Autres avocats clés:
Gunes Haksever
Les références
‘Dentons has done work for us in the Privacy and Security compliance space including providing advice on legal compliance and also negotiation of vendor contracts to enable that compliance.’
‘Hayley Miller is excellent, great at drafting and gives really good advice. ’
‘Vastly experienced practitioners in this team, who give practical and timely advice.’
Principaux clients
ASB Bank Limited
Amazon
Tourism NZ
Serko
Alibaba
PayPal Inc.
Airbnb
nib nz Limited and nib nz Insurance Limited
Institute of Directors
Snapper Services Limited
ANZ Bank New Zealand Limited
The Order of St John
HSBC – The Hongkong and Shanghai Banking Corporation Limited
Downer New Zealand
Danone Nutricia New Zealand Limited
BT Mining
Yahoo
AMP
Oji Fibre Solutions
Pact Group
Footlocker
Wellington City Council
Catalyst IT
Bumble
DLA Piper New Zealand
DLA Piper New Zealand‘s team is increasingly mandated to design customer-facing data protection policies. It is also well-versed in advising on enforcement, government contracting, and SEC disclosure issues. Auckland-based practice head Nick Valentine is regularly called upon to advise on data privacy aspects of tech transactions. Also in the Auckland office, senior associate Edward Eisdell-Moore is involved in GDPR matters, particularly assisting New Zealand businesses on their application of GDPR.
Responsables de la pratique:
Nick Valentine
Autres avocats clés:
Edward Eisdell-Moore
Les références
‘DLA Piper has a strong NZ data protection and cyber security team. They do good work for quality, big NZ and international clients across all aspects of the sector.’
‘Nick Valentine is a leading data protection and IT and cyber security lawyer in NZ. He is very technically strong, he keeps up with trends, and he’s easy to work with.’
‘Great team, easy to work with and experts in the field.’
Principaux clients
Air New Zealand
Foodstuffs North Island
Contact Energy
Levi Strauss & Co
Stripe Payments
Warner Bros. Discovery
Television New Zealand
Apex Group
Auckland Council
Partners Life
AIA
Heartland Bank
Fletcher Building
Mercedes-Benz AG
Starship Children’s Hospital
Frankie Technologies
lululemon athletica
LEGO
Mitre 10
Ethique
Bessemer Venture Partners
CanTeen
TriNetX LLC
Principaux dossiers
- Reviewing Levi Strauss & Co’s privacy and data handling practices, policies and procedures in New Zealand, Australia, Singapore, Thailand, Japan and China.
- Advising Foodstuffs on its ongoing engagement with UK data science company, dunnhumby, as part of Foodstuffs’ project to better leverage customer data.
- Working with Contact Energy’s legal, executive and IT teams to develop a cross-functional cyber incident response plan, and train both the C-Suite and Board on incident response best practice.
Hudson Gavin Martin
Described as ‘one of the leading data protection law firms in New Zealand’, Hudson Gavin Martin‘s Auckland-based team leverages its tech, media and IP expertise to advise on an array of related data protection matters. Practice head Simon Martin frequently assists corporate clients looking to enter New Zealand on data privacy compliance therein. Edwin Lim is frequently called upon to advise M&A investors on the data protection and privacy policies of target companies. Anchali Anandanayagam is described as ‘a fantastic privacy and data protection lawyer at the cutting edge of this area in New Zealand’.
Responsables de la pratique:
Simon Martin
Autres avocats clés:
Edwin Lim; Tim Mahood; Anchali Anandanayagam; Andrew Dentice
Les références
‘The team has great subject matter knowledge as well as and deep understanding of regulatory and legal landscape.’
‘Simon Martin has vast experience in this area and provides timely, accurate, detailed advice. ’
‘Hudson Gavin Martin are one of the leading data protection law firms in NZ. They have deep industry knowledge of the sector and local market, and they are all very technically strong lawyers.’
Principaux clients
Auckland Transport
Bank of New Zealand
Foodstuffs North Island Ltd
One New Zealand Ltd
Xero Ltd
Delta Insurance
Vector New Zealand Ltd
2Degrees
Deloitte New Zealand
Sky Television
Principaux dossiers
- Advising Auckland Transport in relation to their participation in the National Ticketing Solution and on a project to deliver an open-loop contactless ticketing solution for public transport.
- Advised TVNZ on the procurement and implementation of a cloud-based customer data platform from which TVNZ can offer premium audience segments to its advertisers via its existing advertising platforms.
- Advised Foodstuffs in its consideration of implementing facial recognition technology to assist in mitigating increasing risks to safety and security of individuals and property in stores.
MinterEllisonRuddWatts
Privacy and data protection issues handled by MinterEllisonRuddWatts include advising its client roster on handling regulators; advising on privacy risks associated with emerging tech such as AI; and representing clients in privacy disputes before the Human Rights Review Tribunal. Wellington-based co-head Briony Davies frequently acts for clients in privacy complaints and disputes. In Auckland, fellow co-head Richard Wells, praised for his ‘calmness and frankness’, has a proven track record assisting clients in their management of high-profile data breaches. Also in Auckland, June Hardacre and senior associate Suzy McMillan are key contacts.
Responsables de la pratique:
Richard Wells; Briony Davies
Autres avocats clés:
June Hardacre; Suzy McMillan; Kate Anderson
Les références
‘The team provides practical, timely and no-nonsense advice, quickly distilling the issues and not wasting time on the small stuff.’
‘Richard Wells provides timely and sensible advice with a perfect balance of calmness and frankness.’
Principaux clients
NZ Bus
Television New Zealand
Lens Technology and Analytics Limited
Altered State Machine Limited
Department of Internal Affairs
Callaghan Innovation
Milford Asset Management
Southern Cross Health Society
Orrick, Herrington & Sutcliffe
Principaux dossiers
- Advised Altered State Machine Limited on the legal requirements and implementation of a FIFA Artificial Intelligence League Fan Experience.
- Advised an offshore data protection authority on the use of facial recognition technology in NewZealand, including the assessment of surveillance and privacy law.
- Advised one of New Zealand’s largest urban public transport operators around the use of video and audio capable CCTV footage in vehicles.