The Reserve Bank of New Zealand is the first organization to receive a compliance notice under the new Privacy Act, the New Zealand Herald reports. Privacy Commissioner John Edwards said an independent review conducted by KPMG following a December 2020 cyber attack “revealed multiple areas of non-compliance with Privacy Principle 5,” stating organizations must ensure reasonable safeguards to “prevent loss, misuse or disclosure of personal information.” Reserve Bank Governor Adrian Orr said work is underway to address the issues.