This article is based on a presentation made during the Data Privacy Asia 2016 conference held on 9-11 November 2016. Author Karen Ngan is a commercial law partner at Simpson Grierson (New Zealand) . She co–heads the firm's information and communications technology group and its data protection and privacy group. In this article she discusses some of the challenges with dealing with 21st century privacy issues under a Privacy Act that is over 20 years old. She also covers some of the measures or practices that have been taken to address some of these challenges.