Map a New Zealand client's privacy duties to the IPPs
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- Produce an IPP-by-IPP issues list from the client's described data flows.
- What the lawyer must review
- Map duties to the Privacy Act 2020 IPPs, not APP numbers
- Include IPP 3A (indirect collection), in force since 1 May 2026
- Complete a privacy impact assessment before any generative-AI use
- Written for / version
- New Zealand versionNZUS
Rules that apply
The document starts from the task name. Change it if this piece of work is different.
Who does what
| Role | What they do |
|---|---|
| Assistance | Consider narrowly defined preparation support after confirming the tool’s capability and permitted scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.