New Zealand: Privacy Amendment Bill (No. 292-1) including Information Privacy Principle was adopted by Parliament

On 18 September 2025, Parliament adopted the Information Privacy Principle (IPP) 3A in the Privacy Amendment Bill, which introduces notification requirements for the indirect collection of personal information. The agency must take reasonable steps to inform the individual that their information has been collected. This notification must also include the purpose for the collection and the intended recipients of the information. The individual must be made aware of the name and address of both the collecting and the holding agency. If the collection is required by law, the specific law must be identified. The individual must also be informed of their rights to access and correct their information. This notification should occur as soon as reasonably practicable after the collection. The requirement does not apply if the individual is already aware of all these matters. There are several exemptions where notification is not necessary. These exemptions include situations where non-compliance would not prejudice the individual's interests, the information is publicly available, or notification would prejudice law enforcement, public safety, security, or international relations.