Privacy commissioner John Edwards has recommended to the government of New Zealand that the Privacy Act be reformed and the penalty threshold for a serious breach of personal information be increased up to $1m. The privacy commissioner would be able to apply to the High Court for a civil penalty of up to $100,000 for individuals and up to $1m for public and private sector organisations for serious breaches.