What is the main takeaway from "The 2026 NZ privacy compliance checklist for third-party data users"?
An updated checklist covering all your obligations when accessing personal information from third-party data sources in 2026.
What should NZ businesses do to stay compliant?
Document the IPP3A pathway for every third-party lookup, retain evidence with timestamps, and respond to access requests within statutory deadlines. DEIS automates pathway capture, notifications, and audit exports.
Is DEIS a legal adviser?
No. DEIS is a compliance platform that records lookup pathways and evidence. Organisations should confirm legal positions with their counsel or the Office of the Privacy Commissioner where needed.
With the Privacy Amendment Act 2024 now fully in force and the 2026 review underway, here is an updated compliance checklist for every NZ business that accesses personal information from third-party sources.
Before you access data
At the time of collection
After collection
Ongoing
The easy way
Use DEIS. Steps 1–8 are handled automatically for every lookup. Steps 9–15 are supported by DEIS's evidence log, retention settings, and transparency portal.