Notice Title

Notice of Consultation on Proposed Amendments to Privacy Act 2020 Codes of Practice

Publication Date
12 Jan 2026

Tags

Privacy Act Proposed amendments Privacy Commissioner

Notice Number

2026-au42
Title
View PDF
File Type and Size
PDF (21 KB)

Pursuant to section 33 of the Privacy Act 2020, the Privacy Commissioner invites submissions on the proposed amendment of the:

  • Biometric Processing Privacy Code 2025
  • Credit Reporting Privacy Code 2020
  • Health Information Privacy Code 2020; and
  • Telecommunications Information Privacy Code 2020.

The proposed amendments address the introduction of information privacy principle 3A (IPP3A) into the Privacy Act 2020 by the Privacy Amendment Act 2025. From 1 May 2026, IPP3A will require individuals to be notified when their personal information has been indirectly collected by an agency. The amendments to each code create a new rule 3A to address this notification requirement. Additional technical amendments are also proposed.

Pursuant to section 33 of the Privacy Act 2020, the Privacy Commissioner also invites submissions on the proposed amendment of the Civil Defence National Emergencies (Information Sharing) Code 2020.

The proposed amendment addresses a technical error identified in this Code.

An information paper, the proposed amendments and draft consolidated Codes can be found at www.privacy.org.nz.

Submissions are due by 4pm on 16 February 2026 and can be made by email to IPP3A@privacy.org.nz.

Dated this 12th day of January 2026.

MICHAEL WEBSTER, Privacy Commissioner.