Data Protection and Privacy 2026

NEW ZEALAND Law and Practice Contributed by: Shelley Slade-Gully, Tina Liu, Phil Taylor and Veronica Hartley, Tompkins Wake

Tompkins Wake is a leading full-service commercial law firm with more than 120 legal specialists and of - fices in Auckland, Hamilton, Rotorua and Tauranga. Its privacy and data protection team advises pub - lic and private sector clients on regulatory compli - ance, governance and risk management under the Privacy Act and related legislation. Tompkins Wake supports clients across technology, education, local government, healthcare, financial services and pri - mary industries, reflecting the breadth of its national practice. The firm’s work includes privacy impact assessments, data breach response, cross-border

data transfer advice, direct marketing and surveil - lance issues, information-sharing arrangements and regulatory engagement with the Office of the Privacy Commissioner and the Ombudsman. The team also advises on the intersection of privacy with intellec - tual property, employment, cybersecurity and tech - nology contracting, ensuring data considerations are embedded in commercial arrangements. Where matters escalate, Tompkins Wake’s dispute resolu - tion specialists represent clients in investigations, enforcement proceedings and Human Rights Review Tribunal claims.

Authors

Shelley Slade-Gully is a partner and head of Tompkins Wake’s intellectual property and data protection practice. She advises public and private sector clients on privacy compliance under the Privacy Act, data breach

data governance frameworks and the use of AI in healthcare and health-related businesses, including managing privacy risk in clinical trials, patient data ecosystems and cross-border research collaborations. She also supports clients on the privacy aspects of major IT procurement projects.

response, regulatory investigations and cross-border data protection issues. Her work includes advising on information-sharing arrangements, surveillance and marketing practices, and the integration of privacy considerations into technology, intellectual property and commercial contracting frameworks. Shelley regularly engages with the Office of the Privacy Commissioner and the Ombudsman on regulatory matters and represents clients in trade mark and data-related disputes before the Intellectual Property Office of New Zealand. She is a member of the Intellectual Property Society of Australia and New Zealand (IPSANZ).

Phil Taylor is a partner in Tompkins Wake’s corporate and commercial team, with extensive experience advising on cross-border mergers and acquisitions, venture capital investments and complex technology

transactions. He regularly acts on transactions involving data-driven and AI-enabled businesses, where intellectual property and data assets are central to enterprise value. Phil advises on regulatory compliance, foreign investment approvals and the allocation of data protection risk in commercial agreements and corporate structuring. His work includes cross-border acquisitions in the technology and renewable energy sectors across the UK, US, Australia and Asia-Pacific markets. Veronica Hartley is a senior corporate and commercial lawyer with more than 20 years’ experience in private practice and in-house roles across New Zealand, the United Kingdom and Australia. She advises on complex commercial transactions and technology- driven infrastructure projects, with particular

Tina Liu is a specialist in data protection, privacy and regulatory strategy, with a particular focus on the life sciences, healthcare, biotechnology and FMCG sectors. She co-leads Tompkins Wake’s

pharmaceutical and biotechnology practice, advising domestic and multinational clients on compliance with the Privacy Act, overseas disclosures of personal and health information, and the structuring of contractual safeguards for global data transfers. Tina provides strategic advice on

340 CHAMBERS.COM

Powered by