/**
 * New Zealand Privacy Act 2020 Compliance Pack
 *
 * Regulation: Privacy Act 2020 (No 31 of 2020)
 *             Replaces Privacy Act 1993
 *
 * Jurisdiction: NZ (New Zealand / Aotearoa)
 * Regulator: Office of the Privacy Commissioner (OPC)
 *             Privacy Commissioner appointed under Privacy Act 2020, s 11
 *
 * Effective date: 1 December 2020
 *
 * Scope:
 *   Applies to any "agency" handling personal information about individuals
 *   who are in New Zealand at the time the information is collected (or
 *   subsequently transferred). Extra-territorial: applies to overseas agencies
 *   "carrying on business in New Zealand" -- pack must flag NZ data subject
 *   presence even when processing happens offshore.
 *   Does NOT apply to: natural persons acting in purely personal capacity,
 *   news media in news activities (limited exemption), intelligence agencies,
 *   Parliament.
 *
 * Key obligations (13 Information Privacy Principles -- IPPs):
 *   IPP 1:  Purpose of collection -- only collect what is necessary for a
 *            lawful purpose connected to the agency's functions.
 *   IPP 2:  Collection directly from individual -- unless impracticable or
 *            expressly authorised by law.
 *   IPP 3:  Collection of information from individual -- inform before or at
 *            time of collection (purpose, legal authority, recipients, rights).
 *   IPP 4:  Manner of collection -- must not collect by unlawful or unfair means.
 *   IPP 5:  Storage and security -- protect personal information from
 *            unauthorised access, use, modification, disclosure, and loss.
 *   IPP 6:  Access -- individuals have right to access their personal information
 *            held by the agency.
 *   IPP 7:  Correction -- individuals have right to request correction of
 *            personal information.
 *   IPP 8:  Accuracy -- personal information must be accurate, up to date,
 *            complete, relevant, and not misleading before use.
 *   IPP 9:  Retention -- personal information not retained longer than necessary
 *            for purpose; secure disposal required.
 *   IPP 10: Use limitation -- personal information only used for the purpose
 *            for which it was collected (limited exceptions).
 *   IPP 11: Disclosure limitation -- personal information only disclosed for
 *            collection purpose or with individual's consent (exceptions exist).
 *   IPP 12: Unique identifiers -- restrictions on assigning or requiring
 *            unique identifiers.
 *   IPP 13: Transborder data flows (cross-border disclosure) -- personal
 *            information may only be disclosed to overseas recipients where
 *            the recipient is subject to comparable safeguards. Key test:
 *            destination country's regime must be "not materially lower"
 *            than the Privacy Act 2020 standard.
 *
 * Notifiable Privacy Breach Reporting (NPBR):
 *   Under the Privacy Act 2020, agencies must notify the Privacy Commissioner
 *   and affected individuals of a privacy breach that has caused or is likely
 *   to cause serious harm. The notification must be "as soon as reasonably
 *   practicable" -- no fixed hour deadline but 72 hours is the operational
 *   expectation in practice; OPC guidance emphasises promptness.
 *
 * Critical IPP 13 (Transborder Flows) rule:
 *   Pack must flag NZ data subject presence even when processing happens in
 *   another country. Overseas agencies carrying on business in NZ are subject
 *   to the Act. The "comparable safeguards" test is outcome-based, not a fixed
 *   adequacy list like GDPR -- agencies must assess whether the destination
 *   regime is not materially lower than NZ standards.
 *
 * Biometric Code (forthcoming):
 *   The Privacy Commissioner is developing a Biometric Processing Privacy Code
 *   under s 202 of the Act. When finalised, biometric data will face additional
 *   obligations. Pack tracks biometric information for monitoring under any
 *   future Code requirements.
 *
 * Retention:
 *   IPP 9: only as long as needed for purpose. Secure disposal required.
 *   No fixed statutory minimum for most data types.
 *
 * Penalties:
 *   Interference with privacy: orders including compensation up to NZD 350,000
 *   for proceedings before the Human Rights Review Tribunal (HRRT).
 *   Offences: up to NZD 10,000 for specific statutory offences (e.g., misleading
 *   OPC, destroying documents after access request).
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const NZ_PRIVACY_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const NZ_PRIVACY_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
};
//# sourceMappingURL=nz-privacy.d.ts.map