Plain language law

New Zealand law explained for everyone

Privacy Act 2020

Summary of changes

These summaries explain recent changes to the law. They are generated by AI comparing versions of the legislation, so they might oversimplify, miss details, or get things wrong. Learn more about how we track these changes.

14 November 2024

  • Updated URLs in approved information sharing agreements to remove redundant redirects

Affected provisions

  1. 2: Approved information sharing agreements
    Updated URLs in approved information sharing agreements to remove redundant redirects

22 April 2025

  • Exceptions to the application of IPPs 6 and 7 have been amended to include personal information held by the Inspector-General of Defence
  • The Commissioner's referral options for complaints and consultation requirements have been expanded to include the chief executive within the meaning of section 5 of the Customer and Product Data Act 2025
  • Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation

Affected provisions

  1. 1: Transitional, savings, and related provisions
    Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation
  2. 6: Information matching rules
    Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation
  3. 7: Amendments to other enactments related to subpart 4 of Part 7
    Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation
  4. 8: Basic principles of national application set out in Part Two of OECD Guidelines
    Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation
  5. 9: Consequential amendments
    Empowering provisions have been added to various schedules, including Schedules 1, 6, 7, 8, and 9, referencing relevant sections of the Act or other legislation
  6. 29: IPPs 6 and 7 do not apply to certain information
    Exceptions to the application of IPPs 6 and 7 have been amended to include personal information held by the Inspector-General of Defence
  7. 75: Referral of complaint to another person
    The Commissioner's referral options for complaints and consultation requirements have been expanded to include the chief executive within the meaning of section 5 of the Customer and Product Data Act 2025
  8. 208: Consultation
    The Commissioner's referral options for complaints and consultation requirements have been expanded to include the chief executive within the meaning of section 5 of the Customer and Product Data Act 2025

20 May 2025

  • Updated references to external regulations in section 29
  • Revised the list of agencies to be consulted under section 208

Affected provisions

  1. 29: IPPs 6 and 7 do not apply to certain information
    Updated references to external regulations in section 29
  2. 208: Consultation
    Revised the list of agencies to be consulted under section 208

24 May 2025

  • Repeal of provisions related to amendments to other enactments

Affected provisions

  1. 190: Amendments to other enactments related to this subpart
    Repeal of provisions related to amendments to other enactments
  2. 217: Consequential amendments
    Repeal of provisions related to amendments to other enactments

6 August 2025

  • Repeal of provisions related to amendments and consequential changes
  • Repeal of provision regarding the status of Order in Council

Affected provisions

  1. 148: Status of Order in Council
    Repeal of provision regarding the status of Order in Council
  2. 190: Amendments to other enactments related to this subpart
    Repeal of provisions related to amendments and consequential changes
  3. 217: Consequential amendments
    Repeal of provisions related to amendments and consequential changes

9 September 2025

  • Repeal of provisions related to Orders in Council and amendments to other enactments

Affected provisions

  1. 148: Status of Order in Council
    Repeal of provisions related to Orders in Council and amendments to other enactments
  2. 190: Amendments to other enactments related to this subpart
    Repeal of provisions related to Orders in Council and amendments to other enactments

7 October 2025

  • Clarified time frames for decision-making on requests to correct personal information and responding to IPP 6 requests
  • Updated formatting of provisions without substantive legal changes
  • Expanded grounds for refusing access to personal information to protect individual interests
  • Updated information sharing agreements to include new categories of shared information
  • Made minor technical changes to repeal dates and citations
  • Updated the Commissioner's functions to include assessing privacy laws of countries

Affected provisions

  1. 2: Approved information sharing agreements
    Updated information sharing agreements to include new categories of shared information
  2. 3: Identity information
    Made minor technical changes to repeal dates and citations
  3. 17: Functions of Commissioner
    Updated formatting of provisions without substantive legal changes
  4. 18: Other functions of Commissioner
    Updated the Commissioner's functions to include assessing privacy laws of countries
  5. 34: Urgent issue of code of practice
    Updated formatting of provisions without substantive legal changes
  6. 44: Responding to IPP 6 request
    Clarified time frames for decision-making on requests to correct personal information and responding to IPP 6 requests
  7. 49: Protection, etc, of individual as reason for refusing access to personal information
    Expanded grounds for refusing access to personal information to protect individual interests
  8. 63: Decision on request to correct personal information
    Clarified time frames for decision-making on requests to correct personal information and responding to IPP 6 requests
  9. 218: Repeal of section 217 and Schedule 9
    Made minor technical changes to repeal dates and citations

29 November 2025

  • Editorial update to reflect the correct title of the Public Safety Act
  • Amendment to the definition of New Zealand agency to clarify exceptions for the Parliamentary Service

Affected provisions

  1. 4: Law enforcement information
    Editorial update to reflect the correct title of the Public Safety Act
  2. 8: Meaning of New Zealand agency
    Amendment to the definition of New Zealand agency to clarify exceptions for the Parliamentary Service

25 December 2025

  • Amendments have been made to refine the application of information privacy principles to personal information collected or held for personal or domestic affairs
  • Changes have been made to the disclosure of personal information to prescribed countries, including amendments to information privacy principle 12
  • Repeals and amendments have been made to provisions related to responding to information privacy principle 6 requests
  • Clarifications have been made to the grounds for refusing access to personal information, including the protection of individuals and the readiness of information for retrieval
  • The Commissioner's discretion and obligations have been expanded and refined, including the decision not to investigate complaints and the securing of settlements and assurances
  • Amendments have been made to the procedure after completion of investigations, including the consideration of appropriateness for securing settlements or assurances
  • New provisions have been inserted to define related complaints or matters and to provide for the commencement of proceedings in the Tribunal
  • Changes have been made to the liability and knowledge of officers, employees, agents, and members of agencies, including the definition of agency agents
  • Offences against certain sections of the Crimes Act 1961 have been included in the disclosure of privileged information

Affected provisions

  1. 22: Information privacy principles
    Changes have been made to the disclosure of personal information to prescribed countries, including amendments to information privacy principle 12
  2. 27: Restricted application of IPPs to personal information collected or held for personal or domestic affairs
    Amendments have been made to refine the application of information privacy principles to personal information collected or held for personal or domestic affairs
  3. 44: Responding to IPP 6 request
    Repeals and amendments have been made to provisions related to responding to information privacy principle 6 requests
  4. 49: Protection, etc, of individual as reason for refusing access to personal information
    Clarifications have been made to the grounds for refusing access to personal information, including the protection of individuals and the readiness of information for retrieval
  5. 53: Other reasons for refusing access to personal information
    Clarifications have been made to the grounds for refusing access to personal information, including the protection of individuals and the readiness of information for retrieval
  6. 74: Commissioner may decide not to investigate complaint
    The Commissioner's discretion and obligations have been expanded and refined, including the decision not to investigate complaints and the securing of settlements and assurances
  7. 90: Disclosed information privileged
    Offences against certain sections of the Crimes Act 1961 have been included in the disclosure of privileged information
  8. 91: Procedure after completion of investigation relating to access to personal information
    The Commissioner's discretion and obligations have been expanded and refined, including the decision not to investigate complaints and the securing of settlements and assurances; Amendments have been made to the procedure after completion of investigations, including the consideration of appropriateness for securing settlements or assurances
  9. 94: Procedure after completion of other investigations
    The Commissioner's discretion and obligations have been expanded and refined, including the decision not to investigate complaints and the securing of settlements and assurances; Amendments have been made to the procedure after completion of investigations, including the consideration of appropriateness for securing settlements or assurances
  10. 98: Aggrieved individuals may commence proceedings in Tribunal
    New provisions have been inserted to define related complaints or matters and to provide for the commencement of proceedings in the Tribunal
  11. 120: Liability for actions of officers, employees, agents, and members of agencies
    Changes have been made to the liability and knowledge of officers, employees, agents, and members of agencies, including the definition of agency agents
  12. 121: Knowledge of officers, employees, agents, and members of agencies to be treated as knowledge of employers, principal agencies, and agencies
    Changes have been made to the liability and knowledge of officers, employees, agents, and members of agencies, including the definition of agency agents