O'Brien Legal

O’Brien Legal is a boutique Auckland firm specialising in privacy, data protection and AI governance, supported by strong commercial and technology law capability. The firm helps organisations understand their data obligations and build privacy practices that are clear, workable and aligned with legal requirements. Core services include privacy impact assessments, data mapping, policy development, privacy by design advice, cross border data support, consent and transparency reviews, third party due diligence and tailored privacy training. The firm also advises on commercial contracts, technology agreements and intellectual property matters.

O’Brien Legal also supports clients when things go wrong. The firm assists with privacy breaches, incident response, complaints, regulator engagement and remediation planning. Clients value advice that is quick, practical and grounded in experience across large and complex organisations. O’Brien Legal works with SMEs, corporates and public agencies to strengthen compliance, reduce risk and enable the safe and ethical use of data while supporting commercial outcomes.

Rachel O’Brien

Rachel O’Brien is a privacy and data lawyer based in Auckland with sixteen years of experience helping New Zealand organisations manage information responsibly while still achieving commercial outcomes. She has deep expertise across privacy law, data governance, AI risk, intellectual property and complex commercial contracting. Her background includes senior roles in major organisations, including five years as Head of Legal for Privacy and Data Ethics at BNZ, where she also served as Privacy Officer and Data Protection Officer.

Rachel is known for cutting through complexity and guiding clients through grey areas with clarity. She founded O’Brien Legal to offer specialist advice that protects people, strengthens trust and supports innovation. She believes that strong privacy practice and commercial success go hand in hand when supported by clear strategy and practical governance.




What is the INPLP?

INPLP is a not-for-profit international network of qualified professionals providing expert counsel on legal and compliance issues relating to data privacy and associated matters. INPLP provides targeted and concise guidance, multi-jurisdictional views and practical information to address the ever-increasing and intensifying field of data protection challenges. INPLP fulfils its mission by sharing know-how, conducting joint research into data processing practices and engaging proactively in international cooperation in both the private and public sectors.