Faraday
Get help now

Sources and checks

Every primary source this site relies on, when we last checked it, and how we keep the content accurate.

Sources
110
Verified by hand
76
Maximum age
180 days, enforced by the build

How we keep it accurate

Privacy law in New Zealand changed a lot in 2025 and 2026, and it will keep changing. So we recheck it on a schedule, and the build enforces it.

  • Every guide lists the sources it relies on, with the date each was last checked.
  • The site's build fails if any source goes more than 180 days without a recorded check.
  • Sources marked "to verify" are ones we cite for contact details or general reference and haven't yet re-opened since our last review. They're listed for maintainers to confirm before each release.
  • Legal logic in the tools is covered by automated tests, written so a reviewer can follow the reasoning by hand.
  • Anyone can report a problem. Corrections are logged in the changelog.

We prefer primary sources, such as legislation, the Privacy Commissioner, and the agency that runs a register or service. Where we cite secondary sources, such as news reports on a bill, we say so.

The registry

SourcePublisherLast checkedStatus
Privacy Act 2020
Primary source. NZLII section links below are easier to cite by section.		New Zealand Legislation19 October 2026Verified
Privacy Act 2020, s 7 (interpretation, including 'working day')NZLII19 October 2026Verified
Privacy Act 2020, s 11 (information held by an agency on behalf of another)NZLII19 October 2026To verify
Privacy Act 2020, s 22 (the information privacy principles)NZLII19 October 2026To verify
Privacy Act 2020, s 44 (responding to an IPP 6 request within 20 working days)NZLII19 October 2026Verified
Privacy Act 2020, s 112 (meaning of privacy breach and notifiable privacy breach)NZLII19 October 2026To verify
Privacy Act 2020, s 113 (assessing likely harm)NZLII19 October 2026To verify
Privacy Act 2020, s 114 (notifying the Commissioner)NZLII19 October 2026To verify
Privacy Act 2020, s 115 (notifying affected individuals or giving public notice)NZLII19 October 2026To verify
Privacy Act 2020, s 116 (exceptions to notifying affected individuals)NZLII19 October 2026To verify
Privacy Act 2020, s 118 (offence of failing to notify the Commissioner)NZLII19 October 2026To verify
Privacy Act 2020, s 201 (privacy officers)NZLII19 October 2026To verify
Enhancing the Privacy Act (Privacy Amendment Act 2025)Ministry of Justice19 October 2026Verified
IPP3A: notification requirements for indirect collection of personal informationOffice of the Privacy Commissioner19 October 2026Verified
IPP3A decision flowchart (PDF)Office of the Privacy Commissioner19 October 2026Verified
Poupou Matatapu: doing privacy well
OPC says it will use this guidance when deciding on compliance action, and invites people to build their own checklists and templates from it.		Office of the Privacy Commissioner19 October 2026Verified
Sorting out privacy breaches (including NotifyUs)Office of the Privacy Commissioner19 October 2026Verified
Breach management (Poupou Matatapu)Office of the Privacy Commissioner19 October 2026Verified
Biometric Processing Privacy Code 2025
In force 3 November 2025; transition for existing processing ended 3 August 2026; Amendment No 1 (IPP3A) made 25 March 2026.		Office of the Privacy Commissioner19 October 2026Verified
Guidance on complying with the Biometrics CodeOffice of the Privacy Commissioner19 October 2026Verified
Generative artificial intelligence: OPC expectationsOffice of the Privacy Commissioner19 October 2026Verified
Working with third-party providersOffice of the Privacy Commissioner19 October 2026Verified
CCTV guidanceOffice of the Privacy Commissioner19 October 2026Verified
Responding to access requests for CCTV footageOffice of the Privacy Commissioner19 October 2026Verified
Privacy Impact AssessmentsOffice of the Privacy Commissioner19 October 2026Verified
Privacy Statement GeneratorOffice of the Privacy Commissioner19 October 2026Verified
AboutMe (Request My Info tool)Office of the Privacy Commissioner19 October 2026Verified
Ask for your informationOffice of the Privacy Commissioner19 October 2026Verified
Correct your informationOffice of the Privacy Commissioner19 October 2026Verified
Complain to the Privacy CommissionerOffice of the Privacy Commissioner19 October 2026Verified
The Human Rights Review TribunalOffice of the Privacy Commissioner19 October 2026Verified
Sending information overseas (IPP 12)Office of the Privacy Commissioner19 October 2026Verified
Free privacy e-learningOffice of the Privacy Commissioner19 October 2026Verified
Information for privacy officersOffice of the Privacy Commissioner19 October 2026Verified
Codes of practiceOffice of the Privacy Commissioner19 October 2026Verified
Credit Reporting Privacy CodeOffice of the Privacy Commissioner19 October 2026Verified
Children and young people's privacyOffice of the Privacy Commissioner19 October 2026Verified
Clubs and societiesOffice of the Privacy Commissioner19 October 2026Verified
Corporate reports (annual reports)
2024/25 annual report: breach notifications rose from 864 to 1,093.		Office of the Privacy Commissioner19 October 2026Verified
Manage My Health inquiryOffice of the Privacy Commissioner19 October 2026Verified
Executive summary: Manage My Health inquiry, phase oneOffice of the Privacy Commissioner19 October 2026Verified
Confidentiality and the unpublished electoral rollOffice of the Privacy Commissioner19 October 2026Verified
Harmful Digital Communications Act 2015New Zealand Legislation19 October 2026To verify
Harmful digital communicationsNew Zealand Police19 October 2026Verified
Cyberbullying: protections against online harassmentCommunity Law19 October 2026Verified
Applying for a harmful digital communications orderMinistry of Justice19 October 2026To verify
Harassment Act 1997New Zealand Legislation19 October 2026To verify
Report online harmNetsafe19 October 2026Verified
Service update: harmful digital communications complaints
Netsafe reported record HDCA complaint volumes in mid-2026.		Netsafe19 October 2026Verified
Netsafe (community directory entry)
Lists Netsafe as the HDCA Approved Agency, last checked by CAB 11 October 2026.		Citizens Advice Bureau19 October 2026Verified
Reporting cyber incidents after the CERT NZ and NCSC integrationNational Cyber Security Centre19 October 2026Verified
Cyber Security Insights, Q2 2026
1,129 incident reports and $2.7 million in reported direct losses, April to June 2026.		National Cyber Security Centre19 October 2026Verified
Own Your OnlineNational Cyber Security Centre19 October 2026Verified
How Exposed Am INational Cyber Security Centre19 October 2026Verified
Report scam texts by forwarding them to 7726Department of Internal Affairs19 October 2026Verified
New Zealand Anti-Scam Alliance work programme 2026MBIE19 October 2026Verified
Code of Banking Practice (scam protection commitments from 30 November 2025)New Zealand Banking Association19 October 2026To verify
Credit file suppressions in New ZealandIDCARE19 October 2026Verified
My credit report suppression (November 2025)Centrix19 October 2026Verified
Can you go on the unpublished roll?Electoral Commission19 October 2026Verified
Key dates for the 2026 General ElectionElectoral Commission19 October 2026Verified
Local Government (Rating) Amendment Act 2004 (inserts s 28C, withholding owner details)New Zealand Legislation19 October 2026Verified
Withholding names and postal addresses from the rating information database (example form)Dunedin City Council19 October 2026Verified
New law related to directors' residential addressesCompanies Office19 October 2026Verified
New address protections for directors
Confirms commencement on 18 November 2026.		Institute of Directors19 October 2026Verified
Companies Act 1993 (Address Information) Amendment Regulations 2026: Cabinet minuteMBIE19 October 2026Verified
Searching for a debtor personPersonal Property Securities Register19 October 2026Verified
Consumer Data Right policy designMBIE19 October 2026Verified
Matariki dates 2022 to 2052 (Matariki Advisory Committee)MBIE19 October 2026Verified
What the Privacy Maturity Assessment Framework isDigital.govt.nz19 October 2026Verified
Te Mana Raraunga: Māori Data Sovereignty NetworkTe Mana Raraunga19 October 2026To verify
Te Kāhui Raraunga (Māori Data Governance Model)Te Kāhui Raraunga19 October 2026To verify
StopNCII.orgStopNCII19 October 2026To verify
Take It Down (for images taken when under 18)NCMEC19 October 2026To verify
Women's RefugeWomen's Refuge19 October 2026To verify
ShineShine19 October 2026To verify
Safe to talkSafe to talk19 October 2026To verify
Personal Safety User GuideApple19 October 2026To verify
Report non-emergencies to Police (105)New Zealand Police19 October 2026To verify
Is my neighbour allowed to film our property with a security camera? (AskUs)Office of the Privacy Commissioner19 October 2026Verified
What information is my employer entitled to collect while I'm working? (AskUs)Office of the Privacy Commissioner19 October 2026Verified
Can I record someone without telling them? (AskUs)Office of the Privacy Commissioner19 October 2026Verified
What are the rules around posting photos or anything else about other people on social media? (AskUs)Office of the Privacy Commissioner19 October 2026Verified
Are agencies allowed to disclose information to my relatives or partner? (AskUs)Office of the Privacy Commissioner19 October 2026Verified
What can I do if an agency has incorrect information about me? (AskUs)Office of the Privacy Commissioner19 October 2026To verify
How long does an agency have to respond to my request? (AskUs)Office of the Privacy Commissioner19 October 2026To verify
Rental guidance for tenantsOffice of the Privacy Commissioner19 October 2026Verified
Rental guidance for landlordsOffice of the Privacy Commissioner19 October 2026To verify
Guidance for the retail sectorOffice of the Privacy Commissioner19 October 2026Verified
Photocopying proof of identityOffice of the Privacy Commissioner19 October 2026Verified
Case note: bar scans and retains a copy of patron's driver's licenceOffice of the Privacy Commissioner19 October 2026To verify
Releasing information to Police and law enforcement agenciesOffice of the Privacy Commissioner19 October 2026Verified
Charging for access to personal information (flowchart, PDF)Office of the Privacy Commissioner19 October 2026Verified
Health Information Privacy Code 2020Office of the Privacy Commissioner19 October 2026To verify
Your health recordsCommunity Law19 October 2026Verified
Clean slate schemeMinistry of Justice19 October 2026Verified
Deepfake Digital Harm and Exploitation Bill (member's bill 213-1)New Zealand Legislation19 October 2026To verify
NZ is criminalising sexualised deepfakes (20 May 2026)1News19 October 2026Verified
First NZ sentencing for creating, sharing deepfake porn images (22 May 2026)1News19 October 2026Verified
Part 101 rules for dronesCivil Aviation Authority19 October 2026Verified
About unsubscribing (Unsolicited Electronic Messages Act)Department of Internal Affairs19 October 2026Verified
Unsolicited Electronic Messages Act 2007New Zealand Legislation19 October 2026To verify
Crimes Act 1961, s 216B (prohibition on use of interception devices)NZLII19 October 2026To verify
Netsafe warns of tax refund scam surge (4 June 2026)Netsafe via Scoop19 October 2026Verified
Text scam hits more than 140,000 people (RNZ, June 2023)Otago Daily Times19 October 2026Verified
Scams and fraudNZ Post19 October 2026To verify
Regulation (EU) 2016/679 (GDPR), including Article 3 on territorial scopeEUR-Lex19 October 2026To verify
Adequacy decisions (New Zealand is recognised)European Commission19 October 2026To verify
Remove results about you from Google SearchGoogle19 October 2026To verify
Privacy complaints up in 2024/25; Commissioner calls for right to erasure (MLex summary of OPC statement)MLex19 October 2026Verified