Privacy Act 2020

Information privacy principles and codes of practice - Information privacy principles

27: Restricted application of IPPs to personal information collected or held for personal or domestic affairs

You could also call this:

"Some privacy rules don't apply when you collect info for personal use at home."

You have some rights when it comes to your personal information. These rights are called Information Privacy Principles or IPPs. Some of these principles do not apply to you if you are collecting or holding personal information for your own personal or domestic affairs. You are an individual and you collect personal information just for your personal or domestic affairs. Some IPPs do not apply to you in this situation. This includes IPPs 1 to 3 and 4(b) when you collect personal information, and IPPs 5 to 12 when you hold personal information. However, there is an exception. If collecting, using, or sharing the personal information would be highly offensive to a reasonable person, then these exemptions do not apply. You can find more information by looking at the Privacy Act and the Statutes Amendment Act 2025.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS23347.

This page was last updated on 24 December 2025 — View changes

Topics:

Rights and equality > Privacy

26: Restricted application of IPP 13 to unique identifiers assigned before 1 July 1993, or

"Older ID numbers have slightly different privacy rules"

28: IPPs 2, 3, and 4(b) do not apply to personal information collected by intelligence and security agencies, or

"Some privacy rules don't apply to spy agencies collecting personal information."

Part 3Information privacy principles and codes of practice
Information privacy principles

27Restricted application of IPPs to personal information collected or held for personal or domestic affairs

IPPs 1 to 3 and 4(b) do not apply to an agency if that agency—
is an individual; and
is collecting personal information solely for the purposes of, or in connection with, the individual’s personal or domestic affairs.

IPPs 5 to 12 do not apply to an agency if that agency—
is an individual; and
is holding personal information solely for the purposes of, or in connection with, the individual’s personal or domestic affairs and the personal information was—
1. collected by a lawful means; or
2. received by the individual unsolicited; or
3. created by the individual.

However, the exemptions in subsections (1) and (2) do not apply if the collection, use, or disclosure of the personal information would be highly offensive to a reasonable person.

Compare

1993 No 28 s 56

Notes

Section 27(2)(b): replaced, on 27 November 2025, by section 118 of the Statutes Amendment Act 2025 (2025 No 74).