They have increased transparency via removal of a secrecy clause, and increased accountability of providers by removing immunity from proceedings under the Privacy Act. They've also expanded the existing two-year review clause to require consideration of privacy and security outcomes and Māori engagement.