Skip to content

Regulation Tracker / New Zealand

Artificial Intelligence and the Information Privacy Principles

Office of the Privacy Commissioner | Te Mana Matapono Matatapu

last revised 2023-09-21last verified 2026-09-041 versioncountry page →

GuidanceIn forceConfidentialityClient consentCompetence

map categories:Data protection and legal AIVendor due diligenceClient data in AI tools

The New Zealand Privacy Commissioner's expectations for agencies using generative AI under the Privacy Act 2020, published 21 September 2023 with a companion page on generative AI. The Office approves or endorses no AI technology or provider and expects a privacy assessment before an agency uses an AI tool on personal information.

Applies to
firms, all
Effective
21 Sept 2023
Current version
Original · 21 Sept 2023
Last verified
04 Sept 2026
Official text
www.privacy.org.nz/resources-and-learning/a-z-topics/ai/

What the document requires

  • The Information Privacy Principles apply to personal information put into, and produced by, AI tools.
  • Agencies should complete a privacy assessment before using AI tools on personal information.
  • The Office does not approve or endorse any AI technology or AI technology provider.

Version history

VersionDateWhat changedSource
Originalcurrent2023-09-21First version recorded.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "Artificial Intelligence and the Information Privacy Principles" (Office of the Privacy Commissioner | Te Mana Matapono Matatapu, Original, 2023-09-21), safelegalai.com/regulation/nz/nz-opc-ai-information-privacy-principles (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in New Zealand