Unadhi · Australia & New Zealand

NZ IPP3A: telling people when you collect their information from someone else (from 1 May 2026)

The Privacy Amendment Act 2025 added IPP3A to New Zealand's Privacy Act 2020. From 1 May 2026, if your organisation collects personal information about someone from another source (a partner, a list, a website, a referee), you must take reasonable steps to make sure that person knows, unless an exception applies. It applies to information collected from 1 May 2026 onwards.

Where it bites

Lead lists, referrals, background checks, data bought or scraped from websites, and AI tools that enrich records.

What to do

1. Map your indirect sources (an inventory again).
2. Decide which exception, if any, applies to each source, and write down why.
3. Add notification steps to your onboarding and first contact.

Our Apify scrapers collect only public business contact data and respect robots.txt. If you build lists about individuals in NZ, IPP3A may require you to notify them.

Sources: Privacy Amendment Act 2025 · OPC IPP3A guidance

Free sample: send us your product or website link and we'll reply with a one-page draft inventory of your automated decisions, written from your public pages. Questions or corrections: mininglife7@gmail.com Price: EURO AI Register, free for your first system, then US$19/month or US$190/year. Cancel any time. This guide is general information, not legal advice. Sources are official and were checked on 13 Oct 2026.