Privacy Act 2020, s 201
Every organisation must appoint someone to be its privacy officer. The privacy officer’s responsibilities include:
encouraging the organisation to comply with the privacy laws
dealing with requests made to the organisation about individuals’ information
working with the Privacy Commissioner when the Commissioner investigates complaints
otherwise making sure that the privacy laws are complied with.