Skip to main content

Does Cyber Crucible comply with New Zealand's Privacy Act 2020?

Short answer: Cyber Crucible supports a New Zealand agency's obligations under the Privacy Act 2020 by collecting no customer content, credentials, or keys and processing on the endpoint. The Information Privacy Principles — particularly storage and security (IPP 5) and cross-border disclosure (IPP 12) — have minimal surface because there is little personal information in its custody.

How it aligns

  • IPP 5 security — encryption, access control, and autonomous endpoint protection.
  • IPP 12 cross-border — on-premises deployment keeps personal information in New Zealand; no customer content is transferred offshore for security processing.
  • Breach support for the agency's notifiable-privacy-breach obligations.

Vendor-selection notes

The Privacy Act 2020 introduced mandatory breach notification and compliance notices; prompt incident information supports both. Documentation is available on request.

Back to top