Plain language law

New Zealand law explained for everyone

Customer and Product Data Act 2025

Protections - Authorisation

42: Authorisation must not be required as condition of providing product

You could also call this:

“You don't have to agree to data sharing to get a product”

If someone gives you goods or services that are not regulated data services, they are called products. The person giving you these products is not allowed to make you agree to a regulated data service just to get the product. They can only ask you to agree to a regulated data service if it’s really needed to give you the product.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS700307.

Topics:
Money and consumer rights > Consumer protection Business > Industry rules Business > Fair trading Rights and equality > Privacy
Previous

41: Accredited requestor must comply with prescribed duties in respect of authorisation, or

"Approved askers must follow special rules when getting permission"

Next

43: Only customer, secondary user, or accredited requestor may request regulated data service, or

"Only you, your helper, or a special approved person can ask for your customer data"

Part 3 Protections
Authorisation

42Authorisation must not be required as condition of providing product

  1. This section applies if a person provides to a customer goods or services other than regulated data services (products).

  2. The person must not, as a condition of providing a product, require the customer to authorise a regulated data service unless that service is reasonably necessary to enable the person to provide the product.