Privacy Act 2020, Information Privacy Principle 12 (Disclosure Outside New Zealand)
Privacy Act 2020 (NZ), No 31, s. 22 (IPP 12)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 1 December 2020.
A cross border transfer rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Before disclosing personal information to an overseas recipient, confirm one of information privacy principle 12's safeguards applies: the individual's informed authorisation, the recipient being subject to this Act or a comparably safeguarded overseas law, the recipient's participation in a prescribed binding scheme, the recipient being subject to a prescribed country's laws, or another reasonable basis to believe the recipient will protect the information comparably.
If you get it wrong
Private right of actionNo
Who enforces it
Enforcement body
Office of the Privacy Commissioner
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
An agency may disclose personal information to a foreign person or entity only where the individual authorised the disclosure knowing the recipient may not provide comparable safeguards, or the agency reasonably believes the recipient is itself subject to the Privacy Act 2020, subject to comparable overseas privacy laws, a participant in a prescribed binding scheme, subject to a prescribed country's laws, or otherwise contractually bound to provide comparable safeguards.
The condition does not apply where reliance is on the law-enforcement or research-and-statistics disclosure grounds of information privacy principle 11 and compliance is not reasonably practicable.
When LexLint raises it
crawls_webtrains_models
Read the law
official consolidated Act text, New Zealand Legislation