Abstract layered forms inspired by privacy, biometrics and New Zealand contours

Specialist information & technology law

Clarity where law,
information and technology meet.

Clear legal advice on privacy, data, AI, biometrics, confidentiality, technology, intellectual property, disputes and reputation.

Auckland · New Zealand
PrivacyAIDataReputation
O’Brien Legal

Plain English. Clear direction.

Clear legal direction for complex information.

Information law can be intricate. The advice should not be. O’Brien Legal turns difficult questions into practical decisions you can understand on the first read.

How we work
Auckland across the harbour, framed by native New Zealand greenery
Local perspectiveNational reach
A calm Auckland coastal setting with native planting and restrained stone and timber

New Zealand perspective.
Global reach.

Quiet confidence · clear advice

Start with the problem

Advice shaped around
what you need to do.

01

Protect information

Put sound privacy, confidentiality and information practices in place before problems arise.

02

Use technology well

Adopt AI, data and biometric tools with a clear view of legal risk, trust and accountability.

03

Respond & resolve

Act decisively when information is misused, rights are infringed, privacy is breached or reputation is threatened. This includes disputes and enforcement.

A modern specialist practice

AI supports the work, while judgement stays human.

O’Brien Legal uses carefully selected AI and modern legal technology to support research, document analysis, drafting and efficient delivery.

Technology makes the work more focused and responsive. Rachel remains responsible for every legal judgement and piece of advice, with confidentiality, privacy and professional obligations kept at the centre of each matter.

Efficient analysisClearer deliveryHuman accountability
Rachel O'Brien, principal of O'Brien Legal

A specialist practice

Focused expertise, delivered with human advice.

O’Brien Legal is an Auckland specialist practice led by Rachel O’Brien. We work closely with organisations facing important questions about information, technology and reputation.

You get direct, thoughtful advice, expressed plainly and grounded in what your organisation is trying to achieve.

About Rachel

Client feedback

Trusted with work that matters.

Read client feedback
“Rachel has been instrumental in protecting and defending our company’s intellectual property.”
CEO, FMCG company

Latest insights

Important issues, considered clearly.

Practical analysis of privacy, data, AI, biometrics and the legal developments shaping New Zealand organisations.

View all insights

Frequently asked questions

Plain English answers without the legal fog.

Start with a plain English answer, then get advice shaped around the facts if the issue needs a closer look.

View all FAQs
Can my New Zealand business collect biometric information from staff or customers?

Potentially, but the Biometric Processing Privacy Code 2025 now applies. Before collecting or using biometric information, an organisation generally needs to establish a lawful purpose, test whether the processing is necessary and proportionate, consider less intrusive alternatives, provide the required notice and put appropriate safeguards in place. The answer depends on the proposed technology, purpose, setting and effect on people.

What should an AI governance framework include?

A workable framework should define what counts as AI, assign ownership, tier uses by risk, require proportionate assessment before deployment and establish monitoring, escalation and retirement processes. It should also address staff use of general purpose tools, procurement, data handling, output checking, record keeping and incident response.

When does my business need a privacy impact assessment?

New Zealand law does not impose a general PIA requirement for every project, but the Privacy Commissioner expects organisations to use PIAs for new or higher risk information practices. Biometrics, AI, profiling, sensitive information, major data sharing and new overseas arrangements are common triggers. Some specific regimes, including the Biometric Processing Privacy Code, impose more particular assessment obligations.

What intellectual property work does O’Brien Legal do?

The practice covers both commercial IP and strategy or enforcement. That includes ownership and chain of title reviews, copyright and trade mark advice, licensing, assignments, development and collaboration agreements, commercialisation, brand protection strategy, infringement analysis, cease and desist correspondence, negotiated resolutions and litigation strategy with specialist counsel where needed.

Can O’Brien Legal help when a dispute has already started?

Yes. O’Brien Legal advises on complex contractual disputes, including substantial construction claims, as well as breach of confidence, privacy, data, technology, intellectual property, defamation and reputation matters. Rachel also advises on privacy issues arising within employment and relationship property disputes. The work can include case strategy, evidence preservation, urgent correspondence, negotiations, settlement and working with specialist barristers when court proceedings or urgent relief are required.

Does O’Brien Legal use AI and modern legal technology?

Yes. Where appropriate, O’Brien Legal uses carefully selected AI and modern legal technology to support research, document analysis, drafting and efficient delivery. Technology supports the work. Rachel remains responsible for the legal analysis and advice, with confidentiality, privacy and professional obligations kept at the centre of each matter.

A clear first step

Let’s talk about what matters.

Tell us what you are dealing with. We will help you understand the legal position and decide what to do next.

Email O’Brien Legal