Interesting, a person was telling me recently that NZ privacy laws were quite strong. Perhaps a different category.
https://news.ycombinator.com/item?id=44564349
The laws are, the policing is not. At least not in medical data
The laws are, the policing is not. At least not in medical data