I am Head of Privacy and Data Protection at PwC Legal, New Zealand. I’ve been specialising in privacy and data protection since late 2004.


I’ve been specialising in privacy & data protection since late 2004, in both New Zealand and the UK. I’ve spent the last seven years at PwC (both in NZ and the UK) advising some of the world’s largest brands on data protection legal, strategy and compliance issues. I supported many of those organisations get ready for the implementation of the GDPR, and acted for them them during crisis (including major data breaches and regulatory investigations).

I’ve worked in-house at the Office of the NZ Privacy Commission, investigating breaches of the Privacy Act. I’ve also been an in-house privacy advisor at the NZ Police, a Privacy Officer for a multi-national insurance company, and a senior privacy lead at the BBC.

All of this means that I’ve come at privacy from a range of angles, from a range of industries and sectors. This breadth of experience gives me a deep understanding of the data protection challenges that many organisations face, as well as the pragmatism that is sometimes required to address those challenges.

I sit on the commitee of the Privacy Foundation New Zealand and I am a IAPP KnowledgNet Co-Chair for the Wellington chapter. I am CIPP/E and CIPM certified.

Specialties: Data Protection, Privacy Law & Policy, Information Law, Data Security Breach Response



Degrees: LLB / BA
Admission to High Court: 2006


PwC Centre 10 Waterloo Quay, Pipitea, Wellington 6011

Email: polly.k.ralph@pwc.com
Mobile: +64 27 3742031
Website | LinkedIn

Areas of practice


Languages spoken