---
title: "Map a New Zealand client's privacy duties to the IPPs"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply/new-zealand"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-T1-R1-NZ"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["NZ"]
last_reviewed: "2026-09-23"
---

# Map a New Zealand client's privacy duties to the IPPs

> Produce an IPP-by-IPP issues list from the client's described data flows.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply/new-zealand  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Produce an IPP-by-IPP issues list from the client's described data flows. |
| What the lawyer must review | Map duties to the Privacy Act 2020 IPPs, not APP numbers Include IPP 3A (indirect collection), in force since 1 May 2026 Complete a privacy impact assessment before any generative-AI use |
| Written for | New Zealand |
| Applies to | [Build a privacy-law gap table against the principles that apply](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply.md) |

## Checking plan

- What the AI does: Produce an IPP-by-IPP issues list from the client's described data flows.
- Basis: Checked against the linked sources on 23 September 2026. Confirm the current instrument before reliance.

## Notes

- Differs from Australia: the duties are the Information Privacy Principles, not the Australian Privacy Principles.
- IPP 12 is the overseas-disclosure principle, not APP 8.

## Sources

- [OPC: information privacy principles](https://www.privacy.org.nz/privacy-principles/) (checked 2026-09-23)
- [OPC: AI and the IPPs](https://www.privacy.org.nz/resources-and-learning/a-z-topics/ai/) (checked 2026-09-23)
- [OPC: IPP 3A](https://www.privacy.org.nz/resources-and-learning/a-z-topics/ipp3a/) (checked 2026-09-23)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*