It is not unique to New Zealand. The law has been in place for a long time - it has just been revamped. The only new thing is the introduction of potential fines.
...
I think that it now includes the obligation to provide passwords that was not mentioned before.
Yes, it still does not include cloud stored info.