Privacy Act 2020
Breach Response

Privacy Act 2020 NZPRV-7: Notifiable Privacy Breach Scheme

Per Privacy Act 2020 Part 6 (Notifiable Privacy Breaches): breach notification. Requirements include (a) implement Notifiable Data Breaches scheme - if a notifiable privacy breach occurs (compromise of security or integrity of personal information likely to cause serious harm) notify Office of Privacy Commissioner + affected individuals as soon as practicable + (b) conduct breach assessment including likelihood + harm + sensitivity + (c) operate Security Incident Response Procedures including detection + triage + containment + recovery + lessons learned + (d) maintain breach log + assessment process + tabletop exercises + (e) integrate with broader incident management + (f) maintain documentation supporting OPC reporting.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.