In September 2025, New Zealand passed a significant update to its privacy regime with the Privacy Amendment Act now becoming law. The most notable change is the addition of a new principle, Information Privacy Principle 3A (IPP3A), which requires agencies that collect personal information indirectly (i.e. not directly from the individual) to […]