New Zealand. Comprehensive data protection. Act (amendment)
IPP 3A AmendmentPrivacy Amendment Act 2025
In force
§1Summary
- Synopsis
Inserts IPP 3A, requiring agencies that collect personal information indirectly to tell the individual about the collection as soon as reasonably practicable, subject to exceptions.
- Key themes
- Unique features
Brings NZ closer to GDPR Art 14.
- SaaS relevance
SaaS that receive personal data from third parties (enrichment, data brokers, referrals) must notify individuals from 1 May 2026.
§2Obligations
- Extraterritorial
- Yes
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text legislation.govt.nz
- Authority
- Office of the Privacy Commissioner (OPC)
§5Where it applies
- Domestic law of
- New Zealand
§6Sources and verification
- Sources consulted
- Verification
High confidence.
[Link: NZ Legislation (2025 No 53), confirmed via search]