Plain language law

New Zealand law explained for everyone

 Plain Language Law homepage
Back to
26: Restricted application of IPP 13 to unique identifiers assigned before 1 July 1993
or “Old unique identifiers have fewer privacy rules”
You could also call this:

“ Limited privacy rules for personal or family information use ”

You don’t have to follow some of the Information Privacy Principles (IPPs) if you’re an individual collecting or holding personal information just for your own personal or family matters.

If you’re collecting personal information only for your personal or family affairs, you don’t need to follow IPPs 1 to 3 and 4(b).

If you’re holding personal information that you collected legally only for your personal or family affairs, you don’t need to follow IPPs 5 to 12.

But be careful! These exemptions don’t apply if collecting, using, or sharing the personal information would be very upsetting to a reasonable person.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

Next up: 28: IPPs 2, 3, and 4(b) do not apply to personal information collected by intelligence and security agencies

or “Intelligence agencies can collect personal info without telling you”
Next

Part 3 Information privacy principles and codes of practice
Information privacy principles

27Restricted application of IPPs to personal information collected or held for personal or domestic affairs

  1. IPPs 1 to 3 and 4(b) do not apply to an agency if that agency—

  2. is an individual; and
    1. is collecting personal information solely for the purposes of, or in connection with, the individual’s personal or domestic affairs.

      1. IPPs 5 to 12 do not apply to an agency if that agency—

      2. is an individual; and
        1. is holding personal information that was collected by a lawful means solely for the purposes of, or in connection with, the individual’s personal or domestic affairs.

          1. However, the exemptions in subsections (1) and (2) do not apply if the collection, use, or disclosure of the personal information would be highly offensive to a reasonable person.

          Compare