Improving our privacy practices
What we’re doing to improve our privacy practices and how we're meeting our goals.
In May 2025, the Office of the Privacy Commissioner (OPC) issued a Compliance Notice (CN01/2025a) to add urgency to our previous practice improvements.
Our Action Plan
Our response to the Compliance Notice is a 19-point Action Plan. This is broken into four key areas for improvement. These are in line with the Compliance Notice:
- Improving staff skills and capability
- Strengthening information access settings
- Strengthening oversight of service providers
- Strengthening accountability and reporting of privacy incidents.
The due dates are between October 2025 and March 2026.
Details about the specific actions can be found below in our progress dashboard.
Next steps
We’ll continue to make improvements to the way we protect personal information.
We’ll publish the progress updates we send to the OPC on this page.
Action Plan progress reports
Published: October 10, 2025