From 1 May 2026, a new Information Privacy Principle will apply in New Zealand: Information Privacy Principle 3A (IPP3A) under the...

The Biometric Processing Privacy Code 2025 is now law under the Privacy Act. It introduces a specific and enforceable set of rules for any organisation in New Zealand using biometric technologies such as facial recognition, voice ID, fingerprints, or similar tools to identify, verify, or categorise individuals. Key Dates The Code comes into force on 3 November 2025 Organisations already using biometric systems must comply by 3 August 2026 This Code substitutes the 13 standard