Please wait while the page is loading...

loader

New Privacy Amendment Bill introduced to New Zealand Parliament

06 October 2023

New Privacy Amendment Bill introduced to New Zealand Parliament

A new Privacy Amendment Bill was introduced to the New Zealand Parliament on September 5, 2023. It seeks to amend the Privacy Act 2020 (Privacy Act) of New Zealand by adding Information Privacy Principle (IPP) 3A, among others.

IPP 3A is about agencies’ obligation to inform individuals that their personal information or data will be collected from other sources aside from them.

The Privacy Amendment Bill likewise eliminates the agencies’ obligation to inform these individuals of the consequences, if any, arising from failure to provide all or part of the information that needs to be collected, as provided under IPP 3.

IPP 3A will only apply to personal information collected from June 1, 2025 onwards.

Campbell Featherstone, Partner, Dentons Kensington Swan, Wellington

“We have been following this potential change since the Ministry of Justice consulted on it last year. While we consider that the new IPP is likely to impose an additional administrative burden on some agencies, we appreciate that the change will bring us in line with some of New Zealand’s major trading partners, including Australia and the EU,” said Campbell Featherstone, a partner at Dentons Kensington Swan in Wellington.

He added: “We think that if the change is required in order to held New Zealand maintain its ‘adequacy status’ for the purposes of the GDPR, then the administrative burden is a price worth paying. Agencies whose collection practices will require them to make additional disclosures under the new IPP will need to think not only about what they are saying, but also how they communicate to the individuals from whom they indirectly collect information with whom they may not have a pre-existing relationship.”

The addition of IPP 3A is the most notable amendment under the Privacy Amendment Bill. Other changes include amendments to agencies’ responsibilities when responding to correction requests from data subjects regarding their personal information and to provisions about the personal information of minors.

If the bill is enacted, the amendments will enter into force on June 1, 2025. 

- Espie Angelica A. de Leon


Law firms