Plain language law

New Zealand law explained for everyone

Customer and Product Data Act 2025

Regulated data services - Main obligations - Product data

22: Data holder must provide product data to any person

You could also call this:

“Companies must share specific product info if you ask nicely through a special system”

If you ask a data holder for certain information, they must give it to you if three things are true. First, you need to ask for ‘designated product data’. This is a special kind of information about products. Second, you need to make a ‘valid request’. This means you’re asking in the right way. Third, you need to use a special system to ask for the information. This system is described in section 27 of the law.

If all these things are true, then the data holder has to give you the information you asked for. They must use the same system you used to ask for it when they give it to you.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS710030.

Topics:
Money and consumer rights > Consumer protection Business > Industry rules Business > Fair trading Rights and equality > Privacy
Previous

21: How data holders and accredited requestors must deal with joint customers, or

"Rules for sharing information when you have a joint bank account or loan"

Next

23: Data holder may refuse request for data in certain circumstances, or

"Sometimes, people can say no to sharing your data if it might cause problems"

Part 2 Regulated data services
Main obligations: Product data

22Data holder must provide product data to any person

  1. This section applies if—

  2. a person requests that a data holder provides data to the person; and
    1. the data is designated product data; and
      1. the request—
        1. is a valid request; and
          1. is made using the system described in section 27.

          2. The data holder must provide the data to the person using that system.