Closing the Gap: New Privacy Obligations for Indirect Collection of Personal Information under IPP 3A
IPP 3A is a new requirement under New Zealand’s Privacy Act 2020 that applies when an agency collects personal information indirectly rather than from the individual concerned. In most cases, the agency must take reasonable steps to notify the individual that their information has been collected, why it has been collected, who will receive it, […]