Next Generation Partners

Firms To Watch: Data protection and cyber security

Led from Auckland by Karen Ngan and Jania Baigent, the ‘practical and responsive’ team at Simpson Grierson advises on matters including regulatory compliance and responses to cyber-attacks.

Data protection and cyber security in New Zealand

Bell Gully

Bell Gully’s Auckland-based team handles the full spectrum of data protection and privacy work, from compliance advisory to management of data breaches, disputes and responses to ransomware attacks. Team co-head Laura Littlewood is a tech partner; her portfolio of work includes advising on major ICT procurements and on the regulatory aspects of data protection and security matters. Fellow co-head Tania Goatley is a seasoned litigator who is well-placed to advise on the Privacy Act 1993. At associate level, Kristin Wilson frequently handles cases concerning the improper sharing of confidential or personal information with third parties. Regulatory specialist Richard Massey frequently provides advice on product development, whilst Sarah Brougham assists with responses to requests for information under the Privacy Act.

Responsables de la pratique:

Laura Littlewood; Tania Goatley


Autres avocats clés:

Kristin Wilson; Richard Massey; Sarah Brougham


Les références

‘Switched-on, personable and responsive.’

Principaux clients

Air New Zealand


Antares Restaurant Group


ASB Bank


Costco


Facebook


Genesis Energy


Google


Heartland Bank


Illion


Netflix


The Network for Learning (N4L)


New Zealand Lotteries


Next Generation Critical Communications


One NZ


Woolworths New Zealand


Principaux dossiers


  • Advised Crown Infrastructure Partners on the Next Generation Critical Communications Public Safety Network project to deliver communications technology and equipment for emergency services across New Zealand.
  • Advised New Zealand Lotteries Commission (Lotto) on the procurement process and contract with a new gaming system provider.
  • Advised Costco on its preparations for the opening of its first Costco Wholesale Warehouse in the New Zealand market, including on technology and payment agreements.

Buddle Findlay

Notable areas of recent activity for Buddle Findlay’s data protection and privacy team include advising on data protection and cyber security issues in tech and commercial services agreements; assessing and responding to cyber and privacy breaches; honing clients’ internal privacy; as well as advising on related risk policies and practices. Auckland-based Allan Yeoman who is well-placed to advise tech start-ups on privacy issues and data collection, co-leads the practice alongside Amy Ryburn, whose Wellington-based practice includes advising on issues relating to the transfer of data offshore. Also in Wellington, Renee Stiles specialises in drafting and negotiating complex ICT and outsourcing contracts, while senior associate Alexandra Chapman has a proven track-record advising on data protection issues in both New Zealand and the UK. In Auckland, special counsels Keri Johansson and Catherine Miller are further names to note.

Responsables de la pratique:

Allan Yeoman; Amy Ryburn


Autres avocats clés:

Renee Stiles; Alexandra Chapman; Catherine Miller; Keri Johansson


Les références

 ‘The Buddle Findlay team is incredibly well-versed in the current status of the health system, as well as having a deep understanding of historical issues in the sector.’

 ‘My go-to person is always Catherine Miller because she has huge expertise across the health sector, including regulatory issues. I can also trust Catherine to work effectively with team members in all the clinical areas of our business, so that projects can be delivered in accordance with sound legal and regulatory practice.’

‘Buddle Findlay is a firm with broad and deep commercial expertise. I have worked with them on behalf of higher education and global sales and marketing firms and have found their knowledge, capabilities and commercial pragmatism refreshing. Their knowledge of GDPR and data privacy in the Asian region is exceptional.’

Principaux clients

Waka Kotahi NZ Transport Agency


New Zealand Post


Ministry of Business, Innovation and Employment


Te Whatu Ora


Department of Internal Affairs


Wellington City Council


Tertiary Education Commission


Lygon


New Zealand Blood and Organ Service


Sky Television


One NZ (formerly Vodafone NZ)


Bank of New Zealand


The University of Auckland


Principaux dossiers


  • Advised Waka Kotahi NZ Transport Agency on privacy and data protection matters concerning the development and procurement of a nationwide open loop public transport payment system.
  • Advised the Ministry of Business, Innovation and Employment on its procurement of its foundational technology and telecommunications services from Datacom and Vodafone.
  • Acting for Te Whatu Ora in an Employment Court case where the employer had relied on social media posts containing religiously intolerant, political, and anti-COVID vaccination information to dismiss the employee.

Russell McVeagh

Banks, insurers and government agencies turn to Russell McVeagh for assistance with matters ranging from establishing data protection strategies and frameworks across various platforms, to those including data breach management. The team also advises clients on GDPR and regulatory compliance. The unit is additionally handling a growing number of litigation cases concerning injunctions used to protect data. A trio of partners head up the team, being Auckland-based commercial litigator Joe Edwards who has a proven track record handling high-profile privacy, data and confidential information cases; tech specialist Liz Blythe who has longstanding experience advising on privacy and data protection law considerations; and Wellington-based practitioner Mei Fern Johnson who is well-placed to advise on IT outsourcing arrangements. Special counsel Louise Taylor has a focus on tech contracts and operates from the firm’s Auckland office.

Responsables de la pratique:

Joe Edwards; Mei Fern Johnson; Liz Blythe


Autres avocats clés:

Chris Curran; Louise Taylor; Mark Campbell


Les références

‘Liz Blythe is an industry leader with her advice and team. She has an ability to understand an issue very quickly, to provide clear legal advice and tailor it to the issue. She has a strong commercial lens and knows what constraints businesses have.’

‘Mei Fern Johnson is my main contact at Russell McVeagh and she is excellent to work with.’

‘In terms of what makes this practice unique, it’s the deep understanding the team have of the regulatory landscape and relationships with regulators in this space.’

Principaux clients

Bremworth and Cavalier Corporation


Spark


Auckland International Airport


Kiwi Property


Ford


QIC Private Capital


Principaux dossiers


  • Acting for Bremworth and Cavalier Corporation in its High Court proceedings against Pebblemill and Mr Radford in relation to Pebblemill’s alleged use of confidential information.
  • Advised QIC Private Capital on its acquisition of 50% of Vector Limited’s New Zealand and Australian metering business.

Dentons New Zealand

Trading banks, tech companies and household name brands are among the clients who trust the ‘vastly experienced practitioners’ at Dentons New Zealand with mandates ranging from advising on the implications of New Zealand e-commerce regulations, to advising on compliance with privacy laws and regulatory frameworks such as BS11. Campbell Featherstone and Hayden Wilson oversee matters from the firm’s Wellington office. Featherstone frequently works at the nexus between health information and data privacy, whilst Wilson is a key contact for privacy breach responses. The third co-head Hayley Miller applies her trade in Auckland and is well-placed to advise clients on their use of big data.

Responsables de la pratique:

Hayley Miller; Campbell Featherstone; Hayden Wilson


Autres avocats clés:

Gunes Haksever


Les références

‘Dentons has done work for us in the Privacy and Security compliance space including providing advice on legal compliance and also negotiation of vendor contracts to enable that compliance.’

‘Hayley Miller is excellent, great at drafting and gives really good advice. ’

‘Vastly experienced practitioners in this team, who give practical and timely advice.’

Principaux clients

ASB Bank Limited


Amazon


Tourism NZ


Serko


Alibaba


Google


PayPal Inc.


Airbnb


nib nz Limited and nib nz Insurance Limited


Institute of Directors


Snapper Services Limited


ANZ Bank New Zealand Limited


The Order of St John


HSBC – The Hongkong and Shanghai Banking Corporation Limited


Downer New Zealand


Danone Nutricia New Zealand Limited


BT Mining


Yahoo


AMP


Oji Fibre Solutions


Pact Group


Footlocker


Wellington City Council


Catalyst IT


Bumble


DLA Piper New Zealand

DLA Piper New Zealand‘s team is increasingly mandated to design customer-facing data protection policies. It is also well-versed in advising on enforcement, government contracting, and SEC disclosure issues. Auckland-based practice head Nick Valentine is regularly called upon to advise on data privacy aspects of tech transactions. Also in the Auckland office, senior associate Edward Eisdell-Moore is involved in GDPR matters, particularly assisting New Zealand businesses on their application of GDPR.

Responsables de la pratique:

Nick Valentine


Autres avocats clés:

Edward Eisdell-Moore


Les références

‘DLA Piper has a strong NZ data protection and cyber security team. They do good work for quality, big NZ and international clients across all aspects of the sector.’

‘Nick Valentine is a leading data protection and IT and cyber security lawyer in NZ. He is very technically strong, he keeps up with trends, and he’s easy to work with.’

‘Great team, easy to work with and experts in the field.’

Principaux clients

Air New Zealand


Foodstuffs North Island


Contact Energy


Levi Strauss & Co


Stripe Payments


Warner Bros. Discovery


Television New Zealand


Apex Group


Auckland Council


Partners Life


AIA


Heartland Bank


Fletcher Building


Mercedes-Benz AG


Starship Children’s Hospital


Frankie Technologies


lululemon athletica


LEGO


Mitre 10


Ethique


Bessemer Venture Partners


CanTeen


TriNetX LLC


Principaux dossiers


  • Reviewing Levi Strauss & Co’s privacy and data handling practices, policies and procedures in New Zealand, Australia, Singapore, Thailand, Japan and China.
  • Advising Foodstuffs on its ongoing engagement with UK data science company, dunnhumby, as part of Foodstuffs’ project to better leverage customer data.
  • Working with Contact Energy’s legal, executive and IT teams to develop a cross-functional cyber incident response plan, and train both the C-Suite and Board on incident response best practice.

Hudson Gavin Martin

Described as ‘one of the leading data protection law firms in New Zealand’, Hudson Gavin Martin‘s Auckland-based team leverages its tech, media and IP expertise to advise on an array of related data protection matters. Practice head Simon Martin frequently assists corporate clients looking to enter New Zealand on data privacy compliance therein. Edwin Lim is frequently called upon to advise M&A investors on the data protection and privacy policies of target companies. Anchali Anandanayagam is described as ‘a fantastic privacy and data protection lawyer at the cutting edge of this area in New Zealand’.

Responsables de la pratique:

Simon Martin


Autres avocats clés:

Edwin Lim; Tim Mahood; Anchali Anandanayagam; Andrew Dentice


Les références

‘The team has great subject matter knowledge as well as and deep understanding of regulatory and legal landscape.’

‘Simon Martin has vast experience in this area and provides timely, accurate, detailed advice. ’

‘Hudson Gavin Martin are one of the leading data protection law firms in NZ. They have deep industry knowledge of the sector and local market, and they are all very technically strong lawyers.’

Principaux clients

Auckland Transport


Bank of New Zealand


Foodstuffs North Island Ltd


One New Zealand Ltd


Xero Ltd


Delta Insurance


Vector New Zealand Ltd


2Degrees


Deloitte New Zealand


Sky Television


Principaux dossiers


  • Advising Auckland Transport in relation to their participation in the National Ticketing Solution and on a project to deliver an open-loop contactless ticketing solution for public transport.
  • Advised TVNZ on the procurement and implementation of a cloud-based customer data platform from which TVNZ can offer premium audience segments to its advertisers via its existing advertising platforms.
  • Advised Foodstuffs in its consideration of implementing facial recognition technology to assist in mitigating increasing risks to safety and security of individuals and property in stores.

MinterEllisonRuddWatts

Privacy and data protection issues handled by MinterEllisonRuddWatts include advising its client roster on handling regulators; advising on privacy risks associated with emerging tech such as AI; and representing clients in privacy disputes before the Human Rights Review Tribunal. Wellington-based co-head Briony Davies frequently acts for clients in privacy complaints and disputes. In Auckland, fellow co-head Richard Wells, praised for his ‘calmness and frankness’, has a proven track record assisting clients in their management of high-profile data breaches. Also in Auckland, June Hardacre and senior associate Suzy McMillan are key contacts.

Responsables de la pratique:

Richard Wells; Briony Davies


Autres avocats clés:

June Hardacre; Suzy McMillan; Kate Anderson


Les références

‘The team provides practical, timely and no-nonsense advice, quickly distilling the issues and not wasting time on the small stuff.’

‘Richard Wells provides timely and sensible advice with a perfect balance of calmness and frankness.’

Principaux clients

NZ Bus


Television New Zealand


Lens Technology and Analytics Limited


Altered State Machine Limited


Department of Internal Affairs


Callaghan Innovation


Milford Asset Management


Southern Cross Health Society


Orrick, Herrington & Sutcliffe


Principaux dossiers


  • Advised Altered State Machine Limited on the legal requirements and implementation of a FIFA Artificial Intelligence League Fan Experience.
  • Advised an offshore data protection authority on the use of facial recognition technology in NewZealand, including the assessment of surveillance and privacy law.
  • Advised one of New Zealand’s largest urban public transport operators around the use of video and audio capable CCTV footage in vehicles.