Register Now

AI Procurement, Privacy and Cyber: Risk, Liability and Enforcement

Procure AI safely. Get privacy right. Be ready when a data breach hits. In one session, four experts guide you through AI contracts, vendor risk and liability, so you can buy with confidence. Take a deep dive into AI and privacy, including the obligations and emerging risks, and get ahead of them. Prepare yourself for cybersecurity litigation, regulatory investigations and enforcement after a data breach. Walk away knowing how to apply the Privacy Act to the use of AI systems and update your privacy policies to match. Get to grips with transparency around automated decision making and the emerging guidance from regulators. When a cyber incident or privacy breach happens, you'll know how to respond to investigations and how to manage the incident. Gain insight into regulatory enforcement pathways, penalties and the claims that arise, and take home lessons from recent cyber and data-breach enforcement activity and emerging litigation trends. 

Monday, 15 March 2027
4.00pm to 4.15pm Break
Learning Objectives:

 

  • Gain tips to apply best practice when procuring AI safely including contracts clauses vendor risk and liability
  • Understand the issues in AI and privacy including legal obligations and emerging risks
  • Navigate cybersecurity litigation, regulatory investigations and enforcement after a data breach
Description

Attend and earn 3 CPD Hours

3.00pm to 4.00pm AI and Privacy: Legal Obligations and Emerging Risks
  • Applying the Privacy Act to the use of AI systems
  • Updating privacy policies to reflect the use of AI
  • Transparency around automated decision making and human review requirements
  • Emerging guidance from privacy regulators on responsible use of AI

Presented by Suzy McMillan, Special Counsel, MinterEllisonRuddWatts; Recognised in Chambers Asia-Pacific, Technology, Media & Telecommunications

4.15pm to 5.15pm Cybersecurity Litigation, Regulatory Investigations and Enforcement after a Data Breach
  • Responding to investigations following cyber incidents and privacy breaches
  • The powers and expectations of privacy, cybersecurity and sector regulators
  • Managing legal professional privilege during cyber incident investigations
  • Regulatory enforcement pathways, penalties and other consequences
  • Third-party claims, class actions and contractual liability arising from breaches
  • Lessons from recent cyber and data-breach enforcement activity and emerging litigation trends

Presented by Tanya Wood, Partner, Duncan Cotterill; Insurance, Cyber and Construction Disputes Specialist and Dion Morley, Senior Associate, Duncan Cotterill; Selected Participant, Global Insurance Law Connect Academy 2025

Chair:

Peter Fernando, Partner, Duncan Cotterill

2.00pm to 3.00pm Procuring AI Safely: Contracts, Vendor Risk and Liability

Presented by Edwin Lim, Partner, Hudson Gavin Martin; Lecturer, University of Auckland 

Presenters

Edwin Lim, Partner, Hudson Gavin Martin
Ed is a partner at Hudson Gavin Martin, a boutique technology, media and intellectual property law firm. Ed’s main areas of practice are technology and IP development, commercialisation, protection and procurement. Ed has worked with businesses across various industry sectors (both customers and vendors) and has numerous clients offering SaaS solutions. In addition to his law degree, he has a degree majoring in Information Systems, so understands the technical, business and legal issues involved in technology projects. Ed is a committee member of the Auckland District Law Society Technology Law Committee and is the Secretary of the NZ Middle East Business Council.


Suzy McMillan, Special Counsel, Minter Ellison Rudd Watts
Suzy is a commercial and technology lawyer with specialist expertise in privacy and data protection law. She regularly advises clients on their compliance obligations under data protection law, including managing and responding to data breaches, drafting privacy policies, data transfer agreements, privacy impact assessments, direct marketing permissions, and helping clients navigate individual privacy requests and complaints. Suzy is also an Executive Council Member of Digital Identity New Zealand.


Peter Fernando, Partner, Duncan Cotterill
Peter specialises in artificial intelligence, privacy, technology and cyber. He is one of New Zealand's leading advisors on AI adoption and governance, helping organisations navigate the legal, regulatory and practical challenges of deploying AI across their operations. His advice spans AI procurement and contracting, responsible AI frameworks, data protection, and the intersection of AI with intellectual property and privacy law. Peter sits on Duncan Cotterill's AI and Automation Steering Committee, keeping him at the forefront of how AI is transforming both legal practice and the broader business landscape. This internal leadership role complements his client-facing work, giving him a practical, hands-on perspective that goes beyond theory. Peter also brings deep experience advising private and public sector clients on technology projects of all sizes and general commercial deals. With qualifications in both law and computer science, and hands-on experience in the IT industry, Peter combines genuine technical understanding with pragmatic legal advice. Whether he is negotiating complex technology contracts, advising boards on AI strategy and risk, or working behind the scenes, Peter helps his clients reach outcomes that fit.

Dion Morley, Senior Associate, Duncan Cotterill
Dion Morley is a Senior Associate in the litigation and dispute resolution team at Duncan Cotterill. He specialises in cyber, insurance, construction, financial regulatory litigation and commercial disputes, and advises clients across a broad range of contentious and risk management matters. Dion has extensive experience acting for insurers in cyber breach response matters, including breach counsel engagements, technology claims, recoveries and policy coverage advice. Alongside Partner Tanya Wood, he helps manage a 24/7 cyber incident response hotline for a New Zealand insurer, providing urgent legal support to organisations responding to cybersecurity incidents. His practice also includes construction disputes, insolvency matters, regulatory investigations, class actions and commercial litigation in the District Court and High Court. Dion is actively involved in technology and innovation initiatives within the firm and is a member of Duncan Cotterill's AI implementation group, where he assists in evaluating emerging legal technologies and their practical applications. In 2025, Dion was selected as one of six emerging insurance lawyers worldwide to participate in the inaugural Global Insurance Law Connect Academy, recognising his growing reputation in insurance law.

Tanya Wood, Partner, Duncan Cotterill
Tanya Wood is a Partner at Duncan Cotterill and a leading disputes lawyer specialising in insurance, cyber, construction and commercial litigation. With more than 20 years' experience advising insurers, brokers and commercial clients, she is recognised for her expertise in complex civil claims, cybersecurity incidents, construction disputes, professional indemnity matters and insurance coverage issues. Tanya regularly acts in high value and technically complex disputes, including defective building claims, liability disputes, financial services claims and first response cyber matters. She has extensive experience advising insurers on policy coverage issues and has developed a reputation for providing practical, commercially focused advice in high pressure situations. Before joining Duncan Cotterill, Tanya advised insurers impacted by the Christchurch earthquakes and worked on some of New Zealand's largest and most complex insurance claims. Her experience in large scale disaster related litigation continues to inform her work advising clients on risk management, dispute resolution and claims strategy. Tanya is a contributor to the Chambers and Partners Global Practice Guide: Insurance & Reinsurance Law and Practice in New Zealand.

WEB273NZA14

AI Procurement, Privacy and Cyber: Risk, Liability and Enforcement

CHOOSE YOUR SESSION AND
DELIVERY MODE BELOW

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

Single Session
Monday, 15 March 2027
2.00pm to 5.15pm New Zealand
CPD Hours 3
$345.00
Online 20261030 20270315

Online

Register
Register
On Demand 20261030 20270315

Post Seminar Recording

Register
Register
dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}

dddd 60169948502 - 60169948502 - {has_more=false, offset=0, total=0, results=[]}