Proposed Privacy Act amendments – What you need to know about indirect personal data collection

A new Privacy Amendment Bill was recently introduced to Parliament.  The Bill proposes to insert a new Information Privacy Principle (IPP) 3A into the Privacy Act 2020, which would impose additional obligations on those who indirectly collect personal information about individuals. 

The key purpose of the change, according to the explanatory note in the Bill, is “to improve transparency for individuals about the collection of their personal information and better enable individuals to exercise their privacy rights”. 

Privacy legislation refers to those who collect personal information about individuals as “agencies” and we use that terminology in this article. 

What changes are proposed?

Privacy legislation (in particular the existing IPP 3) already obliges agencies who collect personal information directly from an individual to notify certain things to that individual.  The proposed IPP 3A would extend this requirement so that agencies which collect personal information indirectly would also be subject to similar obligations. 

The new IPP 3A would apply to:

  • all agencies (including natural persons and public and private organisations) which collect personal information about an individual from sources other than directly from the individual concerned,
  • but only in respect of personal information collected on and after 1 June 2025 (i.e. it would not apply retrospectively).

An agency to which the proposed IPP 3A applies will need to ensure that the individual about whom information is collected is made aware of:

  • the fact that the information has been collected;
  • the purpose for which the information has been collected;
  • the intended recipients of the information;
  • the name and address of the agency that has collected the information and any agency holding the information;
  • if the collection of the information is authorised or required by or under law, the particular law under which the collection of the information is authorised or required; and
  • the individual’s right to access and correct information.

What exceptions are available? 

There are a number of exceptions available which permit non-compliance with IPP 3A.  Most importantly, an agency does not need to take the above steps if the individual concerned has previously been made aware of the matters noted above.  For example, the exception may apply if an agency indirectly collects information about an individual from a third party, and that third party has previously notified the individual (in an adequate manner) that his or her information will be disclosed to the agency and also as to the matters noted above. 

There are also some further exceptions, some of which are similar to those that apply in respect to IPP 3, and some which are additional grounds available for IPP 3A only.  For example, an agency does not need to comply with IPP 3A if the agency believes on reasonable grounds that: 

  • the information being collected indirectly is publicly available;
  • compliance would reveal a trade secret; or
  • informing the individual concerned of the matters specified in IPP 3A would cause a serious threat to public health or safety, or to the health or safety of another individual.

What does this mean for you?

If the Bill is passed into law, agencies will need to consider their information collection processes.  This could include considering what steps can be taken to make individuals aware that their personal information is being collected indirectly.  If information is collected through an intermediary, a key question will be does the individual concerned know? 

The proposed changes may also lead agencies to review their contractual arrangements with such third parties to ensure privacy obligations are considered.  Privacy policies would need to be reviewed to ensure they clearly state what indirect sources are being used to collect personal information and to whom personal information will be disclosed.  

If you have any questions or wish to find out more information about these proposed changes, please contact our Business Advice Team or your usual contact at Hesketh Henry. 


Disclaimer:  The information contained in this article is current at the date of publishing and is of a general nature.  It should be used as a guide only and not as a substitute for obtaining legal advice.  Specific legal advice should be sought where required.

Do you need expert legal advice?
Contact the expert team at Hesketh Henry.
Media contact - Kerry Browne
Please contact Kerry with any media enquiries and with any questions related to marketing or sponsorships on +64 9 375 8747 or via email.

Related Articles / Insights & Opinion

Gloriavale and BNZ – where is the line on the right of accessibility to services?
Whether accessibility to banking services is a fundamental right is an issue that is currently before the High Court in the dispute between Bank of New Zealand (BNZ) and the Christian Church Community...
07.12.2023 Posted in Insurance
employment dictionary website
Gloriavale residents found to be employees – yes, again!
The employment status of a worker is a concept that has long been contested and is challenging to determine for many, especially with flexible working arrangements and the so-called ‘gig economy’....
07.12.2023 Posted in Employment
Money Growth People Wide BW
How much do you earn?
The Employment Law Team explore the legality of pay secrecy clauses in employment agreements and whether any changes may be on the horizon in a recent Legalwise Insights article.  Read the article he...
30.11.2023 Posted in Employment
Privacy Commissioner to consult on Privacy Rules for Biometric Information
With the increasing use of facial recognition technology (FRT), retinal scans, and voice recognition by an array of different agencies, privacy concerns about its collection and use are set to be form...
24.11.2023 Posted in Business Advice
Fern forest NZ
Bioenergy in New Zealand: Fuels for the Future?
The energy transition from combustion fuels to low carbon alternatives is viewed as critical in the race to cut global CO2 emissions and reach climate targets.  We look at some of the opportunities p...
14.11.2023 Posted in Business Advice & Climate Change & Forestry
Will Wide BW
A well drafted will is a craft
The New Zealand do-it-yourself “DIY” attitude and way of life is not limited to home improvements, but sometimes also extends to wills.  Recently we had a DIY $5.99 fill in the blanks will acros...
07.11.2023 Posted in Private Wealth
rsz large pillars
Health and Safety: The Consequences of Dishonesty
Siddhartha Gautama said that lies are like huge, gaudy vessels, the rafters of which are rotten and worm-eaten, and that those who embark in them are fated to be shipwrecked.  Two remarkable health a...
03.11.2023 Posted in Employment & Health & Safety
Send us an enquiry

For expert legal advice, please complete the form below or call us on (09) 375 8700.