At the 2018 Cyber Risk Management Seminar, Gary Hughes discussed the likely changes that would be part of New Zealand’s Privacy Act reform. This reform does not exist in a vacuum, and Gary points to elements of cyber risk that are informing the changes. Discover the basics of mandatory reporting for data breaches, and how a notifiable breach is defined. Learn about the steps in the proposed life cycle for user data and take a closer look at the response of regulators to cyber risk. Gary Hughes is a barrister who is considered New Zealand’s leading lawyer specialising in Anti-Money Laundering and is an expert on commercial regulation and government agencies.