Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

NotifyUs is for organisations and businesses to work out if privacy breaches are notifiable and report them to us.

If you are an individual with a privacy complaint involving your own or another person's personal information do not use NotifyUs, please go here.

If you are an organisation and have a privacy breach that is likely to cause anyone serious harm, you are legally required to notify us and any affected persons as soon as you are practicably able to. 

As a guide, our expectation is that a breach notification should be made to our Office no later than 72 hours after agencies are aware of a notifiable privacy breach.

Click the button below to help you determine whether your breach is notifiable or not.

Do I need to notify?

If you have already determined that a privacy breach at your organisation is notifiable, or wish to notify us in any case, click on the 'Report a breach' button below to be taken to NotifyUs. 

See a checklist of what information is required here.

Please note: NotifyUs works best with up-to-date internet browsers (e.g. Chrome, Firefox and Edge). We recommend not using legacy browsers with it (e.g. Internet Explorer and legacy Edge).

Report a breach

If you need to update a privacy breach report you previously submitted to us, you can:

Email your update to: notifyus@privacy.org.nz

Or use this from:

Update a breach