New Zealand: Privacy Amendment Act, including information privacy principle enters into force

On 1 May 2026, the Privacy Amendment Act, which introduces notification requirements for the indirect collection of personal information, enters into force. The Act requires agencies to notify individuals when collecting personal information from third parties, with exceptions for data collected before 1 May 2026. The notification must also include the purpose for the collection and the intended recipients of the information. The individual must be made aware of the name and address of both the collecting and the holding agency. If the collection is required by law, the specific law must be identified. The individual must also be informed of their rights to access and correct their information. The notification should occur as soon as reasonably practicable after the collection. The requirement does not apply if the individual is already aware of all these matters. There are several exemptions where notification is not necessary, including situations where non-compliance would not prejudice the individual's interests, the information is publicly available, or notification would prejudice law enforcement, public safety, security, or international relations.