It has a higher amount of detail regarding digital privacy, including that businesses and organisations keep personal information of customers, clients and employees safe.

The new law allows for the issuing of compliance notices, and enforcement in the Human Rights Review Tribunal.

[2] In the Human Resources Director Magazine, Matt Hutscheson writes that during employee investigations, employees may request information under the Privacy Act and may refuse to partake in the processes of the organisation until they get their requested information.

Hutscheson writes that the information requested is often not related to processes the employer is running.

[6] Writing for the Auckland Law School, Nikki Chamberlain and Stephen Penk say that the Act is outdated, saying that "our new Act does not adequately address the risks of the 21st century" and "there is a real need to develop the law around misappropriation of personality to protect an individual's right to identity privacy", and that the Act does not give a right to be 'forgotten'.