30 WAIKATO BUSINESS NEWS <strong>July</strong>/<strong>August</strong> <strong>2020</strong> Hill Laboratories expands Jonno Hill Hill Laboratories have expanded their viticulture testing capability with the acquisition of the assets of Vine Testing Laboratory, a specialised ELISA laboratory able to diagnose Grapevine leafroll-associated virus 3 (GLRaV-3). “We’re excited to expand our services available to the wine industry, adding virus testing to our existing Vine to Vintage testing service through this purchase,” says Hill Laboratories CEO, Dr Jonno Hill. Hawkins named for ACC build Keeping ahead of cybercriminals Artist’s Impression Tainui Group Holdings (TGH) has appointed Hawkins to build the new 10,000 sqm offices which will accommodate ACC in Hamilton. TGH chief executive Chris Joblin says the appointment follows a competitive tender process and will see work teams mobilise on the site for the project from October <strong>2020</strong>. Taking the region’s pulse Kelvyn Eglinton A key <strong>Waikato</strong> community data and consultation project that will inform local funders’ and philanthropists’ decision-making has confirmed long-standing challenges and pointed to new concerns. The <strong>Waikato</strong> Vital Signs <strong>2020</strong> report, titled ‘Welcome to <strong>Waikato</strong> – The Beating Heart of New Zealand’, is now available for download, and follows an earlier report in 2016. Momentum <strong>Waikato</strong> chief executive Kelvyn Eglinton says the pandemic was a major theme in community input to the report. “Another point that has come to the fore since the 2016 effort is concern around local democracy, both the need for councils to listen and the public to participate.” CBD awards set for November The annual CBD Celebration Awards will be held on 18 November 6.30pm-10pm, with the venue not yet identified. The awards, criteria and judging process undergone a refresh and will be unveiled over the coming weeks. Meanwhile, the Hamilton Central <strong>Business</strong> Association, which runs the awards, has shifted offices across Garden Place to Panama Square. Cyber security is a constant battle. <strong>Business</strong>es need to keep ahead of cybercriminals, who take every opportunity to exploit vulnerabilities. Due to Covid-19, organisations suddenly had their workforce working at home with little time to set up appropriate security (if not already existing) and cybercriminals adapted their attacks to focus on the situation. Apart from having good preventive cyber security measures in place, you need a cyber security incident response plan that can help you bounce back from attacks faster CERT NZ issued an advisory last month stating that attackers are using vulnerabilities in organisation’s remote working access systems to create ransomware attack opportunities. Our PwC threat intelligence team has reported that ransomware attacks have increased significantly since December 2019. Apart from having good preventive cyber security measures in place, you need a cyber security incident response plan that can TECHNOLOGY SECURITY > BY AARON STEELE Aaron Steele is a PwC Senior Manager based in the <strong>Waikato</strong> office. Email: aaron.steele@pwc.com help you bounce back from attacks faster. Cyber incident response is not just a technical IT matter, it is an event that has implications for your entire business. Executing a strong cyber incident response plan and communicating your actions clearly and calmly lets you control the situation and reduce the impact on your business. The incident response plan should be scaled to the size and impact on your business. Crucial elements of a response plan include: • Knowing what you need to operate effectively and related risks. • Having a process for identifying the appropriate response based upon scale and impact of the incident. • Having clarity over key roles and responsibilities. • Being ready to respond at speed - staff know what the plan is and the escalation process. • Being operationally ready - staff are aware of suspicious activity (phishing emails) and how to report these. • Having a contact list for key staff and suppliers (IT support, lawyer). • Having alternative systems/processes available if main business systems are not available (for example, phone ordering if online ordering is unavailable). • Testing and rehearsing the plan to fine-tune it. • Having a communications plan, including social media. • Understanding Privacy Act implications. A recent trend in ransomware attacks is that an organisation’s data is selectively released onto the dark web in order to escalate the payment of the ransom. Even if organisations pay the ransom, it is no guarantee that they will recover their data. Organisations who suffer a ransomware attack also need to consider the Privacy Act implications of the attack and whether they need to report the breach. It will be mandatory after 1 December <strong>2020</strong>, if there is a risk of serious harm. New Privacy Act <strong>2020</strong> In April <strong>2020</strong>, the World Economic Forum reported that more than 4.1 billion records were breached in the first half of 2019. With the introduction in recent years of new privacy regulation such as the European GDPR that places significant fines on breaches of personal data, it is timely that New Zealand’s Privacy Act has been revised. The Privacy Commissioner gains new powers and an increase in fines for breaches. The new Privacy Act <strong>2020</strong> will replace the 1993 legislation and is expected to commence on 1 December <strong>2020</strong>. The Office of the Privacy Commissioner has outlined the key changes as: • The requirement to report serious privacy breaches. This is the most notable change. Organisations will have to notify the Privacy Commissioner and any affected individuals if there is a breach of privacy that has caused or poses a risk of causing serious harm. • A new privacy principle has been added to regulate the way personal information is sent overseas. Personal information may only be disclosed outside of New Zealand if the receiving organisation is subject to similar safeguards to those in the Privacy Act. • Overseas businesses that are carrying out business in New Zealand will be subject to the Act, even if they have no physical presence in this country. For example, overseas online-only retailers. • An enhancement to Principle 1 is that an individual’s identifying information cannot be collected if it isn’t needed. A privacy breach means: • Unauthorised or accidental access to, or disclosure, alteration, loss, or destruction of, the personal information. • An action that prevents the agency from accessing the information on either a temporary or permanent basis. The Privacy Act includes guidelines for assessing the likelihood of serious harm that covers the risk, nature and sensitivity of the breach. Failure to notify the Privacy Commissioner is an offence with fines up to $10,000. Organisations need to consider what changes to their processes are required before 1 December <strong>2020</strong> to meet the new requirements. Holiday Pay - SME sector affected Holiday pay issues first hit the headlines during 2016. Recent news articles in June <strong>2020</strong> have again raised issues with payroll systems that could affect the calculation of holiday pay for employees in the SME sector. This issue has previously been largely confined to large employers in both the private and public sector with millions of dollars in arrears being paid to employees. The focus has now shifted to the SME sector, which is likely to have greater risk, due to the nature of employment and greater reliance on payroll systems. In the period from 2012 to December 2019, the Labour Inspectorate has completed 168 payroll audits, which have resulted in $108 million of arrears being paid to 165,000 employees (payments vary between $29 to $8,000 per employee). This doesn’t include the millions paid to employees based upon employers addressing the issue themselves. The types of employment arrangements that are most affected by the holiday pay issue is where employees have variable hours, and especially if those hours are unpredictable. The Holidays Act refers to weekly increments of pay and multiple calculations for annual leave, whereas it is common for payroll systems to calculate leave using hourly rates and only use one method of calculating annual leave payments. If you think that your business may be affected, PwC has a team of specialists that work in this area that are available to assist. The comments in this article of a general nature and should not be relied on for specific cases. Taxpayers should seek specific advice.
Emma Gillard, Emma’s at Oxford, North Canterbury - 2019 winner. Blair Wigglesworth, Crate Clothing, Hamilton and Mount Maunganui - 2019 winner. Saran and Amy Tepavac, Hamills Fishing and Hunting Specialists, Taupo - 2019 winners. Luke and Rachael, Barefoot Sailing Adventures, Bay of Islands - 2019 winners. <strong>Waikato</strong>, how could $ 20,000 help your business? 2degrees Shop Local is back for another year, with five $20,000 advertising packages for local businesses. With more Kiwis choosing to keep it local, and shop local, let us know how that money could help your business. Enter at 2degrees.nz/shoplocal Terms apply FIGHTING FOR FAIR FOR KIWI BUSINESS
Change language