Cartel conduct: New Zealand’s first ever criminal cartel prosecution
The Commerce Commission recently filed criminal charges against two construction companies and their directors for alleged bid-rigging of publicly funded construction contracts. This is New Zealand’s first ever criminal prosecution for alleged cartel conduct under the Commerce Act 1986.
Bid-rigging, or collusive tendering, occurs where some or all the bidders collude to pre-determine who will win the bid or tender. This is a form of cartel conduct that is prohibited by the Act.
The case is currently before the court so information is limited but, if found guilty, the companies and their directors could face serious penalties. Each company could be fined up to $10 million, three times their commercial gain from the cartel conduct or 10% of their turnover per year per breach. Each director could be imprisoned for up to seven years and/or fined up to $500,000.
The Commission’s willingness to bring criminal proceedings for cartel conduct is a warning for all businesses to understand their obligations under the Act and have adequate processes to avoid engaging in cartel conduct.
New privacy rules for biometrics
The Office of the Privacy Commissioner (OPC) has announced it will release a draft policy code early this year regulating the collection and use of biometric information. The code will have direct implications for any businesses dealing with biometric information.
Biometric information is any information about a person’s biological or behavioural characteristics, such as fingerprints, face, voice or eyes. It is increasingly common for businesses to collect and use biometric information to verify people’s identities online, enhance retail security, control access to devices or physical spaces, or to monitor attendance at a site or a work place.
While the use of biometrics has significant benefits for businesses, it also increases the risks of profiling, discrimination, bias, and lack of transparency and control to individuals.
The OPC has proposed three categories of rules that businesses must comply with when collecting and using biometric information. These are:
1. Proportionality assessment: Businesses must undertake a proportionality assessment to ensure that the reasons for collecting biometric information outweigh the risk of privacy intrusion
2. Transparency and notification: Businesses must be open and transparent with individuals and the public about the collection and use of their biometric information, and
3. Purpose limitations: The collection and use of biometric information will be restricted for certain purposes.
The public will have an opportunity to provide feedback on the code before it is implemented.