--- title: What you need to know about the new Information Privacy Principle 3A description: New IPP3A privacy regulations came into force on 1 May 2026. Learn how to ensure compliance and maintain transparency when collecting personal information indirectly. image: https://moranlaw.co/hubfs/AI-Generated%20Media/Images/a%20pale%20blue%20background%20a%20navy%20bluepurple%20filing%20cabinet%20with%20an%20open%20drawer%20One%20red%20file%20is%20lifting%20out%20of%20the%20drawer-3.jpeg --- [![dark-logo](https://moranlaw.co/hubfs/dark-logo.png) ![top-logo](https://moranlaw.co/hubfs/top-logo.png) ![dark-logo](https://moranlaw.co/hubfs/dark-logo.png) ![top-logo](https://moranlaw.co/hubfs/top-logo.png) ![dark-logo](https://moranlaw.co/hubfs/dark-logo.png)](https://moranlaw.co) - Our Services - [Intellectual Property](https://moranlaw.co/protecting-intellectual-property) - [Commercial and Corporate](https://moranlaw.co/commercial-and-corporate) - [For Families](https://moranlaw.co/for-families) - [Elevated Trust Management](https://moranlaw.co/elevated-trust-management) - [Not-For-Profit](https://moranlaw.co/not-for-profits) - [Privacy, Cyber, and Data Security](https://moranlaw.co/privacy-cyber-and-data-security) - [Our Team](https://moranlaw.co/moranlaw-team) - [About Us](https://moranlaw.co/about) - [Careers](https://moranlaw.co/careers) - [Blog](https://moranlaw.co/blog) [Contact us](https://moranlaw.co/contact) - Our Services - [Intellectual Property](https://moranlaw.co/protecting-intellectual-property) - [Commercial and Corporate](https://moranlaw.co/commercial-and-corporate) - [For Families](https://moranlaw.co/for-families) - [Elevated Trust Management](https://moranlaw.co/elevated-trust-management) - [Not-For-Profit](https://moranlaw.co/not-for-profits) - [Privacy, Cyber, and Data Security](https://moranlaw.co/privacy-cyber-and-data-security) - [Our Team](https://moranlaw.co/moranlaw-team) - [About Us](https://moranlaw.co/about) - [Careers](https://moranlaw.co/careers) - [Blog](https://moranlaw.co/blog) [Contact us](https://moranlaw.co/contact) - Our Services - [Intellectual Property](https://moranlaw.co/protecting-intellectual-property) - [Commercial and Corporate](https://moranlaw.co/commercial-and-corporate) - [For Families](https://moranlaw.co/for-families) - [Elevated Trust Management](https://moranlaw.co/elevated-trust-management) - [Not-For-Profit](https://moranlaw.co/not-for-profits) - [Privacy, Cyber, and Data Security](https://moranlaw.co/privacy-cyber-and-data-security) - [Our Team](https://moranlaw.co/moranlaw-team) - [About Us](https://moranlaw.co/about) - [Careers](https://moranlaw.co/careers) - [Blog](https://moranlaw.co/blog) ##### WELLINGTON, NEW ZEALAND Level 1, 40 Lady Elizabeth Lane Wellington 6011 Postal: PO Box 10538 Wellington 6140 Phone: +64 4 830 2430 Email: [team@moranlaw.co](mailto:team@moranlaw.co) ##### AUCKLAND, NEW ZEALAND Suite 502, Level 5, Achilles House 8 Commerce Street Auckland 1010 Phone: +64 9 951 1468 ##### SYDNEY, AUSTRALIA Level 26, 44 Market Street  Sydney, NSW, 2000 Phone: +61 2 9091 4258 ![](https://moranlaw.co/hs-fs/hubfs/AI-Generated%20Media/Images/a%20pale%20blue%20background%20a%20navy%20bluepurple%20filing%20cabinet%20with%20an%20open%20drawer%20One%20red%20file%20is%20lifting%20out%20of%20the%20drawer-3.jpeg?width=1280&name=a%20pale%20blue%20background%20a%20navy%20bluepurple%20filing%20cabinet%20with%20an%20open%20drawer%20One%20red%20file%20is%20lifting%20out%20of%20the%20drawer-3.jpeg) # What you need to know about the new Information Privacy Principle 3A ![Louisa Joblin](https://moranlaw.co/hs-fs/hubfs/New%20team%20member%20social%20photo%20(4).png?width=80&name=New%20team%20member%20social%20photo%20(4).png) [Louisa Joblin](https://moranlaw.co/blog/author/louisa-joblin) May 1, 2026, 9:00:00 AM NZST Information Privacy Principle 3A (IPP3A) came into force on 1 May 2026. All organisations and businesses that handle personal information are now required to have systems in place to meet the new requirements. What is IPP3A? IPP3A introduces a new obligation to notify individuals about indirect collection of their personal information. It has been added to the Privacy Act to increase transparency about indirect collection, to help New Zealand maintain its “adequacy” status (that is, that our privacy protections are considered adequate in comparison to those under the European GDPR). Until now, New Zealand’s privacy law has not included a requirement for an agency to notify an individual when it collects personal information about them indirectly, such as from a third party. This meant that an individual might not know that an agency holds their personal information. What’s required to comply with IPP3A? When an agency collects personal information from a third party (i.e. other than from the individual concerned), the agency will now need to notify the individual about various things, including: - the fact of collection; - the purpose of collection; - the intended recipients of the information; - the name and address of the agency that has collected the information and is holding it; - any law authorising or requiring collection; and - the individual’s rights of access to and correction of the information. These notification requirements mirror how IPP3 operates already, now extended to indirect collection. Are there any exceptions? Much like IPP3, there are practical exceptions when the obligation to notify under IPP3A does not apply, such as where complying would prejudice the maintenance of the law or the personal information is publicly available. Additionally, the obligation to notify does not apply where an individual has previously been made aware of the required information. For example, if agency A notified the individual at the time of collection that it would be disclosed to agency B, agency B does not also have to notify the individual. What do organisations and businesses need to do to be compliant? If they haven't already, organisations and businesses should prioritise reviewing: - their **current practices relating to personal information collection**, including auditing how they obtain information to identify indirect sources; - their **privacy policies / statements** to ensure they remain up-to-date with respect to indirect collection, including specifically stating when personal information is collected indirectly; and - **contractual arrangements relating to data sharing** between agencies to make sure they have strong and clear requirements around notification of indirect collection. IPP3A has now come into effect, and depending on how your organisation or business operates there may still be some doubt about whether it is meeting its obligations. MoranLaw’s experienced team have been keeping an eye on these privacy law developments, and can help your business or organisation understand how to comply with the new IPP3A. [**Get in touch today**.](https://moranlaw.co/moranlaw-team) Share on: [Share on Facebook](https://www.facebook.com/sharer.php?u=https://moranlaw.co/blog/what-you-need-to-know-about-the-new-information-privacy-principle-3a) [Share on LinkedIn](https://www.linkedin.com/shareArticle?mini=true&url=https://moranlaw.co/blog/what-you-need-to-know-about-the-new-information-privacy-principle-3a) Tags: [Privacy Law](https://moranlaw.co/blog/tag/privacy-law) You may also like ![](https://moranlaw.co/hs-fs/hubfs/AI-Generated%20Media/Images/A%20pale%20blue%20background%20There%20Are%206%20segments%20in%20each%20segment%20there%20is%20a%20different%20component%20Each%20component%20is%20red%20In%20the%20first%20segment%20there%20is%20a%20thumbprint%20In%20the%20second%20segment%20there%20is%20an%20eye%20In%20the%20third%20segment%20there%20is%20a%20smile%20in%20the%20fourth%20segm-1.png?width=630&name=A%20pale%20blue%20background%20There%20Are%206%20segments%20in%20each%20segment%20there%20is%20a%20different%20component%20Each%20component%20is%20red%20In%20the%20first%20segment%20there%20is%20a%20thumbprint%20In%20the%20second%20segment%20there%20is%20an%20eye%20In%20the%20third%20segment%20there%20is%20a%20smile%20in%20the%20fourth%20segm-1.png) August 23, 2025, 9:00:00 AM NZST What you need to know about the Biometric Processing Privacy Code 2025 ![](https://moranlaw.co/hs-fs/hubfs/AI-Generated%20Media/Images/isometric%20The%20image%20features%20a%20pale%20blue%20background%20Against%20the%20close%20up%20of%20a%20navy%20blue%20letterbox%20Where%20the%20number%20for%20the%20letterbox%20would%20be%20there%20is.png?width=630&name=isometric%20The%20image%20features%20a%20pale%20blue%20background%20Against%20the%20close%20up%20of%20a%20navy%20blue%20letterbox%20Where%20the%20number%20for%20the%20letterbox%20would%20be%20there%20is.png) February 4, 2026, 2:17:00 PM NZDT New legislation to allow some company directors to keep addresses private ![](https://moranlaw.co/hs-fs/hubfs/tristan-gassert-IRzq8sDxb7w-unsplash.jpg?width=630&name=tristan-gassert-IRzq8sDxb7w-unsplash.jpg) February 21, 2025, 12:13:58 PM NZDT The Exclusivity of the Champagne Name in New Zealand ### SPECIALIST AREAS [Intellectual Property](https://moranlaw.co/protecting-intellectual-property) [Commercial and Corporate Law](https://moranlaw.co/commercial-and-corporate) [For Families](https://moranlaw.co/elevated-trust-management) [Elevated Trust Management](https://moranlaw.co/for-families) [Not-For-Profits](https://moranlaw.co/not-for-profits) [Privacy, Cyber, and Data Security](https://moranlaw.co/privacy-cyber-and-data-security) ### The Team - [Scott Moran](https://moranlaw.co/scott-moran-moranlaw) - [Amanda Griffiths](https://moranlaw.co/amanda-griffiths-moranlaw) - [Louisa Joblin](https://moranlaw.co/louisa-joblin-moranlaw) - [Jessie Malcolm](https://moranlaw.co/jessie-malcolm-moranlaw) - [Ffion Merchant-Williams](https://moranlaw.co/ffion-merchant-williams-moranlaw) - [John Hackett](https://moranlaw.co/john-hackett-moranlaw) - [Chelcie Kite](https://moranlaw.co/chelcie-kite-moranlaw) - [Venetia McInman](https://moranlaw.co/venetia-mcinman-moranlaw) - [Fergielyn Catayoc](https://moranlaw.co/fergielyn-catayoc-moranlaw) - [Lucas d’Arbois de Jubainville](https://moranlaw.co/lucas-darbois-de-jubainville-moranlaw) - [Kimberley Will](https://moranlaw.co/kimberley-will-moranlaw) - [Shamara Polliack](https://moranlaw.co/shamara-polliack-moranlaw) - [Tracey Lucas](https://moranlaw.co/tracey-lucas-moranlaw) - [Kathy Hunter](https://moranlaw.co/kathy-hunter-moranlaw) - [Sara Barnes](https://moranlaw.co/sara-barnes-moranlaw) - [Rebecca Evans](https://moranlaw.co/rebecca-evans-moranlaw) - [Flora Dryburgh](https://moranlaw.co/flora-dryburgh-moranlaw) - [Jacky Simperingham](https://moranlaw.co/jacky-simperingham-moranlaw) - [Tom Winfield](https://moranlaw.co/tom-winfield-moranlaw) ### Quick Links - [Contact Us](https://moranlaw.co/contact) - [About Us](https://moranlaw.co/about) - [Careers](https://moranlaw.co/careers) - [Privacy Policy](https://moranlaw.co/privacy-policy) - [Terms](https://moranlaw.co/terms-of-engagement) - [Our Blog](https://moranlaw.co/blog) © MoranLaw Limited 2024 [LinkedIn](https://www.linkedin.com/company/moranlaw) [Instagram](https://www.instagram.com/moranlawnzau/) [Facebook](https://www.facebook.com/profile.php?id=61557642282289) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Louisa Joblin", "url" : "https://moranlaw.co/blog/author/louisa-joblin" }, "dateModified" : "2026-06-02T22:33:34.834Z", "datePublished" : "2026-04-30T21:00:00.000Z", "headline" : "What you need to know about the new Information Privacy Principle 3A", "image" : [ "https://moranlaw.co/hubfs/AI-Generated%20Media/Images/a%20pale%20blue%20background%20a%20navy%20bluepurple%20filing%20cabinet%20with%20an%20open%20drawer%20One%20red%20file%20is%20lifting%20out%20of%20the%20drawer-3.jpeg" ], "mainEntityOfPage" : { "@id" : "https://moranlaw.co/blog/what-you-need-to-know-about-the-new-information-privacy-principle-3a", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://moranlaw.co/hubfs/RGB-MoranLaw-logo-primary-BlueAndGreen-2.png" }, "name" : "Moran Law" } } ```