Neither Australia nor New Zealand has laws requiring organizations to notify people affected by data breaches. Regulators in both countries now generally encourage organizations to report breaches. New Zealand’s Law Commission completed a five-year study of the country’s Privacy Act in 2011. There is still no new law on the books, but officials are reviewing proposals and plan to introduce related legislation. Australia’s Liberal Party is pushing for legislation, but there’s support from the Liberal Party to push ahead with the push ahead of a ruling.”]
Source: https://www.cuinfosecurity.com/australia-new-zealand-still-mulling-data-breach-laws-a-9134