Consultation on Proposed Amendments to Privacy Act 2020 Codes of Practice #NZprivacy

NZ Privacy Commissioner invites submissions on the proposed amendment of the:

- Biometric Processing Privacy Code 2025
- Credit Reporting Privacy Code 2020
- Health Information Privacy Code 2020; and
- Telecommunications Information Privacy Code 2020.

The proposed amendments relate to information privacy principle 3A (IPP3A) into the Privacy Act 2020. From 1 May 2026, IPP3A will require individuals to be notified when their personal information has been indirectly collected by an agency. The amendments to each code create a new rule 3A to address this notification requirement. Additional technical amendments are also proposed.

OPC also invites submissions on proposed amendment of the Civil Defence National Emergencies (Information Sharing) Code 2020.

More information at https://www.privacy.org.nz/tuhono-connect/haveyoursay/

Submissions are due by 4pm on 16 February 2026 and can be made by email to [email protected].

https://gazette.govt.nz/notice/id/2026-au42

Office of the Privacy Commissioner | Have your say

@norightturnnz The focus has been on #ManageMyHealth #DataBreach but I'd like more information on the supposed #Neighbourly data breach too.

That one (if real) included names, email addresses, phone numbers, physical addresses and any posts people made. Potentially a lot of personal information and dangerous #NZPrivacy fail.

ManageMyHealth data breach: What we know as up to 126,000 possible users affected

Between 6 and 7% of the portal's 1.8 million users may have had data accessed.

The New Zealand Herald