News & support
Articles
Legislation updates, compliance guidance, product news, and industry-specific advice for NZ data users.
IPP6 Access Request Trends in NZ: Data Privacy Rights & Business Preparations
Under IPP6, individuals have the right to access their personal information. Businesses need to prepare for these changes including compliance issues and transparency.
Credit Bureau of Cambodia as a Model for Health Information Exchange in Cambodia
The Credit Bureau of Cambodia (CBC) model could be adapted to ensure robust data protection in New Zealand's healthcare sector under Privacy Act 2020.
Privacy Week Themes: Foundations for Future & Practical Steps
Focus on building strong privacy frameworks, prepare for stringent third-party data regulations, ensure AI governance respects individual rights.
Compliance with New Zealand Privacy Act 2020
The NZ Privacy Act 2020 extends jurisdiction to overseas companies and enforces strict data protection standards.
Enhanced Notification Requirements Under NZ Privacy Act 2020
NZ companies must notify individuals about indirect data collection and provide accessible portals for viewing personal data.
Web research on privacy compliance at small business scale in New Zealand
The Privacy Act 2020 imposes strict obligations on businesses regarding data handling practices and privacy compliance. Non-compliance can result in significant fines, emphasizing the need for SMEs to invest in tools that manage risks effectively.
New Zealand Privacy Act Compliance: Acquiring Wellness Companies from May 1st, 2026
As of May 1st, 2026, IPP3A mandates notifying individuals for indirect data collection.
Navigating NZ Privacy Act 2020 & US CLOUD Act Compliance
Businesses must adapt to avoid cloud storage of PII under the CLOUD Act, aligning with NZ's Privacy Act 2020.
Q2 2026 platform update: bridge, inbox, bureaus, and what is next
Fifteen weeks after launch, DEIS has shipped bridge filing, individual inbox tools, MFA, and MoJ integration — with analytics dashboard up next.
New Zealand Privacy Act 2020: Key Points and Compliance Strategies
The Privacy Act 2020 mandates stringent data privacy standards for all agencies operating within New Zealand, including those overseas. It introduces new enforcement measures and expands its reach.
Privacy Act 2020 Review: Impacts on Credit and Vehicle Check Businesses
New Zealand's Privacy Act 2020 amendments affect businesses handling personal data, especially those processing credit and vehicle checks.
Privacy Week 2026: five IPP3A mistakes NZ businesses still make
Privacy Week is a good time to audit third-party lookups. These five IPP3A mistakes show up in OPC complaints and customer support tickets alike.
Bridge certify: filing bureau lookups back to your DEIS evidence trail
Completed a Carjam or PPSR search in the browser? The bridge certify step attaches site reference, snapshots, and screenshots to your lookup record.
OPC inquiry? How to respond using your DEIS evidence export
If the Privacy Commissioner asks how you satisfied IPP3A for specific lookups, your DEIS evidence log is designed to answer that question in one export.
Preview: the new DEIS analytics dashboard
We are building a comprehensive analytics dashboard that gives you visibility into your lookup patterns, compliance rates, and team activity.
The 2026 NZ privacy compliance checklist for third-party data users
An updated checklist covering all your obligations when accessing personal information from third-party data sources in 2026.
DeisChat: AI help for Privacy Act and lookup questions in your dashboard
Ask DeisChat about IPP3A pathways, evidence exports, integrations, and how to use DEIS — directly from the business portal sidebar.
MFA now available: add an extra layer of security to your DEIS account
For high-security environments, you can now enable multi-factor authentication alongside magic-link login.
Your privacy inbox: manage IPP6 requests and lookup notifications in one place
The DEIS individual portal now supports a full Gmail-style inbox for privacy notifications, access requests, and responses from organisations.
DEIS mobile app: run compliant lookups from anywhere
The DEIS mobile app is now available for iOS and Android. Run lookups, check your evidence trail, and manage notifications on the go.
Hospitality and tourism: IPP3A when verifying guests, staff, and contractors
Hotels, motels, and tour operators run credit checks, reference checks, and licence verifications — often without recording how IPP3A was satisfied.
One month in: how individuals are using the DEIS transparency portal
Thirty days after launch, individuals are opening notifications, viewing lookup details, and submitting IPP6 requests — here is what the first month showed.
Education: privacy compliance when accessing student records from third-party sources
Universities and polytechnics accessing student data from NZQA, StudyLink, or other institutions must comply with IPP3A. Here is how.
DEIS Chrome extension: run compliant lookups on bureau websites
The DEIS browser extension brings IPP3A evidence capture to Carjam, PPSR, and other bureau sites — without leaving the page you already use.
Court records through DEIS: Ministry of Justice integration now live
Search Ministry of Justice court records through DEIS with full IPP3A compliance. Available now for eligible subscribers.
Launch week lessons: what the first DEIS lookups taught us
In our first week live, businesses ran lookups across Carjam, PPSR, and credit bureaus — and surfaced three compliance patterns we had not seen in beta.
DEIS launches: NZ privacy compliance platform for businesses and individuals
New Zealand businesses can now run third-party data lookups with automatic IPP3A evidence — and individuals can see who accessed their data — from a single platform at deis.nz.
Logistics and freight: privacy compliance for identity verification and proof of delivery
Freight and logistics companies collect personal information for identity verification and delivery confirmation. Here are the privacy obligations.
AI and privacy: what NZ businesses need to know about using AI with personal data
Using AI to process personal information from third-party sources creates unique privacy challenges. Here is the current legal position.
DEIS now integrates with illion: three credit bureaus, one compliance platform
illion joins Centrix and Equifax as our third credit bureau integration. All three bureaus, one compliance workflow.
Privacy Act review 2026: what changes are on the horizon
The Government has announced a comprehensive review of the Privacy Act 2020. Here is what is likely to change and how to prepare.
DEIS year in review: 2025 highlights
A look back at what we shipped, the privacy landscape changes, and what is coming in 2026.
Open banking in NZ: privacy implications for data sharing APIs
As NZ moves toward open banking, the privacy implications of API-based financial data sharing are significant. Here is what to prepare for.
How long should you keep lookup data? A guide to data retention under the Privacy Act
The Privacy Act limits how long you can retain personal information. Here is how to set appropriate retention periods for lookup data.
Government agencies: IPP3A obligations for inter-agency data sharing
When government agencies share personal information between themselves, IPP3A still applies. Here is how to manage it.
DEIS API documentation: integrating compliance into your existing systems
The DEIS API allows developers to integrate IPP3A-compliant lookups directly into their business applications.
Healthcare: privacy compliance when accessing patient data from third-party sources
Health agencies accessing data from ACC, PHOs, or other health databases have specific privacy obligations. Here is what to know.
New feature: bulk lookups with batch compliance
Run up to 100 lookups at once with the same IPP3A pathway. Perfect for portfolio reviews and batch processing.
Construction industry: privacy compliance when vetting subcontractors
Checking a subcontractor's company status, director history, and financial standing involves third-party data. Here is how to handle the privacy obligations.
DEIS now integrates with Equifax NZ for compliant credit reporting
Equifax joins Centrix as our second credit bureau integration. Run credit checks through either bureau with full IPP3A compliance.
Privacy Commissioner Annual Report 2025: key takeaways for data users
The Privacy Commissioner's annual report highlights increasing complaints about third-party data collection. Here is what it means for DEIS users.
Customising your IPP3A notification templates in DEIS
DEIS sends notifications to individuals when the notification pathway is selected. Here is how to customise the content and branding.
Telcos: privacy compliance for customer credit checks and identity verification
Telecommunications companies run millions of credit and identity checks annually. Here is how to manage the compliance at scale.
Cross-border data transfers: NZ privacy obligations when data leaves the country
When personal information collected through NZ sources is transferred overseas, additional privacy obligations apply. Here is what you need to know.
The DEIS transparency portal: how individuals can see their data access history
A guide for individuals on how to use the DEIS transparency portal to see who has accessed their personal information.
Energy retailers: privacy compliance for credit checks and customer data sharing
Energy companies share customer data with credit bureaus and access third-party data for credit assessments. Here is how to stay compliant.
Carjam integration update: new data fields and faster lookups
Our Carjam integration now includes additional vehicle data fields and significantly faster response times.
Landonline property searches: privacy obligations for conveyancers and agents
Property searches through LINZ Landonline involve personal information about property owners. Here is how to handle the privacy requirements.
Received a compliance notice from the Privacy Commissioner? Here is what to do
If the OPC issues a compliance notice, you need to act quickly. Here is a step-by-step guide to responding.
How DEIS magic-link authentication works and why it is secure
No passwords to remember or breach. Here is how our magic-link login works and the security measures behind it.
Debt collection agencies: privacy compliance when tracing and collecting
Debt collectors access multiple data sources to trace debtors and assess ability to pay. Here is how to manage the privacy obligations.
IPP7: handling requests to correct personal information
When an individual says your records are wrong, you have obligations to correct or annotate. Here is the process.
IPP6 explained: the individual's right to access their personal information
When someone asks to see what data you hold about them, you have 20 working days to respond. Here is how to handle it.
Law firms: managing privacy compliance in litigation and due diligence
Lawyers access personal information from multiple sources during litigation and transactions. Here is how to handle the privacy obligations.
New feature: team management and role-based access
DEIS now supports multiple users per business account with role-based access controls. Manage who can run lookups, export evidence, and update settings.
Accounting firms: privacy compliance in client due diligence
AML/CFT due diligence requirements mean accounting firms access third-party data regularly. Here is how to handle the privacy obligations.
Centrix integration: running compliant credit checks through DEIS
DEIS now offers direct Centrix integration. Here is how to set it up and ensure every credit check is IPP3A compliant.
How to export your DEIS evidence log for audits and investigations
Step-by-step guide to exporting your compliance evidence trail from DEIS for OPC investigations, audits, or internal reviews.
Recruitment agencies: staying compliant when running candidate background checks
Background checks on job candidates involve multiple third-party data sources. Here is how recruitment agencies can meet their IPP3A obligations.
Privacy Act amendments 2024: what changed and what it means for data users
The Privacy Amendment Act 2024 strengthened enforcement powers and clarified several obligations around third-party data collection.
NZBN lookups: privacy obligations when searching the business number register
The NZBN register contains personal information about sole traders and partners. Here is what you need to know.
Getting started: how to set up your DEIS account in 5 minutes
A step-by-step guide to creating your DEIS account, connecting data sources, and running your first compliant lookup.
Insurance industry: privacy compliance for claims investigation and underwriting
Insurers access personal information from multiple third-party sources during claims and underwriting. Here is how to manage compliance.
DEIS now integrates with Xero: sync contacts, run compliant lookups
Connect your Xero account to DEIS and run privacy-compliant lookups on your existing client base without re-entering data.
Privacy breach notification: when and how to report under the Privacy Act 2020
The Privacy Act 2020 introduced mandatory breach notification. Here is what triggers a notification and what you need to do.
How to use Companies Office data compliantly through DEIS
Company and director searches through the Companies Office are one of the most common lookups in NZ. Here is how to stay compliant.
Real estate agents: tenant screening and the Privacy Act
Running background checks on prospective tenants? Here is how to do it without breaching the Privacy Act 2020.
What is the PPSR and why does it matter for compliance?
The Personal Property Securities Register is one of New Zealand's most-used data sources. Here is what it is and what privacy obligations come with it.
Finance companies: credit check compliance under the Privacy Act 2020
Running credit checks through Centrix or Equifax? Every lookup creates IPP3A obligations that most finance companies are not meeting.
Car dealers: your guide to privacy-compliant vehicle history checks
Every Carjam or PPSR lookup on a customer triggers IPP3A obligations. Here is how NZ car dealers can stay compliant.
OPC enforcement trends: what the Privacy Commissioner is focusing on in 2024
The Office of the Privacy Commissioner has signalled increased scrutiny on third-party data collection practices. Here is what that means for your business.
Privacy Act 2020 IPP3A: what NZ businesses need to know in 2024
Information Privacy Principle 3A requires agencies to notify individuals when collecting personal information from third parties. Here is what that means in practice.
Connected data sources
Centrix — Consumer Credit
Individual credit score, repayment history, defaults, insolvency & company affiliations
Equifax — Consumer Credit
Individual credit file, credit score, repayment history & defaults via Equifax (formerly Veda)
Business Credit Report
Company credit history, directors & risk scoring via Centrix
illion — Tenancy & Risk
Tenancy credit check, driver licence verification, MOJ fines, PPSR, property ownership
TenantCheck
Multi-bureau tenant screening — 10+ years Tenancy Tribunal, credit, illion TINZ database, police records
Ministry of Justice
Court records, fines & traffic infringement history
NZ Police Vetting
Criminal history check for roles involving children, vulnerable people or national security (authorised agencies)
Waka Kotahi — Driver Check
Driver licence status, conditions, classes & endorsements — free monitoring service for employers
PPSR
Personal Property Securities Register — encumbrances, money owing on assets
Companies Office
Company & director records, incorporations, annual returns
NZBN
NZ Business Number registry — entity details, status & director links
Landonline
Land title, ownership, encumbrances & survey records
Market Rent
Tenancy bond rental market data by suburb — median & average weekly rents
Carjam — Full Report
Vehicle history, ownership, stolen check, NZ money owing
Carjam — Stolen & Facts
Basic vehicle stolen check and registration facts only
GBG Cloudcheck
Electronic identity verification against NZ & Australian government sources — AML/KYC compliance
Insurance Claims Register
NZ-wide personal lines claims history — used for underwriting & fraud detection (insurers only)
Intracheck
Pre-employment screening — identity, criminal, qualifications, references, memberships & immigration
Equifax Employment Verification
Candidate background checks — identity, criminal, qualifications, credit, licence & psychometric
Paragon Vetting
Priority Ministry of Justice criminal history checks — government-grade vetting for all sectors
Name-Check NZ
Instant tenant & background screening — credit, Tenancy Tribunal, employment law database
Centrix — Consumer Credit
Individual credit score, repayment history, defaults, insolvency & company affiliations
Equifax — Consumer Credit
Individual credit file, credit score, repayment history & defaults via Equifax (formerly Veda)
Business Credit Report
Company credit history, directors & risk scoring via Centrix
illion — Tenancy & Risk
Tenancy credit check, driver licence verification, MOJ fines, PPSR, property ownership
TenantCheck
Multi-bureau tenant screening — 10+ years Tenancy Tribunal, credit, illion TINZ database, police records
Ministry of Justice
Court records, fines & traffic infringement history
NZ Police Vetting
Criminal history check for roles involving children, vulnerable people or national security (authorised agencies)
Waka Kotahi — Driver Check
Driver licence status, conditions, classes & endorsements — free monitoring service for employers
PPSR
Personal Property Securities Register — encumbrances, money owing on assets
Companies Office
Company & director records, incorporations, annual returns
NZBN
NZ Business Number registry — entity details, status & director links
Landonline
Land title, ownership, encumbrances & survey records
Market Rent
Tenancy bond rental market data by suburb — median & average weekly rents
Carjam — Full Report
Vehicle history, ownership, stolen check, NZ money owing
Carjam — Stolen & Facts
Basic vehicle stolen check and registration facts only
GBG Cloudcheck
Electronic identity verification against NZ & Australian government sources — AML/KYC compliance
Insurance Claims Register
NZ-wide personal lines claims history — used for underwriting & fraud detection (insurers only)
Intracheck
Pre-employment screening — identity, criminal, qualifications, references, memberships & immigration
Equifax Employment Verification
Candidate background checks — identity, criminal, qualifications, credit, licence & psychometric
Paragon Vetting
Priority Ministry of Justice criminal history checks — government-grade vetting for all sectors
Name-Check NZ
Instant tenant & background screening — credit, Tenancy Tribunal, employment law database
Organisations you can request data from