Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

New Zealand: data, AI and cyber laws

Part of APAC.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
In force
New Zealand Biometric Processing Privacy CodeA binding code of practice under the Privacy Act 2020. It sets the privacy rules for organisations that collect and use biometric information, such as face, fingerprints, voice, keystroke patterns or gait, in automated biometric processing like facial recognition. Agencies already using biometrics had a nine-month grace period, which ended on 3 August 2026. Amendment No. 1 aligns the code with the new indirect collection principle (IPP 3A) from 1 May 2026.In effect since Nov 3, 2025
Amended
New Zealand Privacy ActNew Zealand's privacy law, built on 13 Information Privacy Principles plus mandatory notification of serious privacy breaches. The Privacy Amendment Act 2025 adds IPP 3A from 1 May 2026: agencies that collect personal information indirectly (from third parties) must take reasonable steps to tell the individual about the collection, its purpose, recipients and their rights.In effect since Dec 1, 2020

Past deadlines

Transition endsAug 3 · 3 months ago
New Zealand Biometric Processing Privacy CodeGrace period ends for existing biometric processingAgencies already using biometrics before the code started must comply by this date.New Zealand
ComplianceMay 1 · 6 months ago
New Zealand Privacy ActIPP 3A indirect-collection notification appliesAgencies collecting personal information from third parties must take reasonable steps to notify individuals, subject to exceptions.New Zealand
Takes effectMay 1 · 6 months ago
New Zealand Biometric Processing Privacy CodeAmendment No. 1 applies (IPP 3A)The amended code, which reflects IPP 3A, is in force from 1 May 2026.New Zealand
Takes effectNov 3, 2025 · 12 months ago
New Zealand Biometric Processing Privacy CodeBiometric code in forceThe Biometric Processing Privacy Code applies to new biometric processing.New Zealand
Takes effectSep 24, 2025 · 13 months ago
New Zealand Privacy ActPrivacy Amendment Act 2025 technical changes commenceTechnical amendments commence the day after Royal Assent (23 Sep 2025).New Zealand
Takes effectDec 1, 2020 · 5.9 years ago
New Zealand Privacy ActPrivacy Act 2020 in forceIPPs, mandatory breach notification and compliance notices apply.New Zealand