Severity: Medium Amendment NZ Action required

Health Information Privacy Code 2020 amended to introduce new Information Privacy Principle 3A

Original title: Health Information Privacy Code 2020

Published
Source: privacy.org.nz
Effective
Not stated
Deadline
Not stated
Framework: NZ Privacy Act
Privacy Act 2020 (version as at 23 September 2026) source

Why it matters

The Office of the Privacy Commissioner issued Amendment No 2 to the Health Information Privacy Code 2020 in March 2026 to introduce new Information Privacy Principle 3A. This amendment updates the privacy requirements that apply to all New Zealand health agencies, including primary health organisations, medical practitioners, aged care facilities, ACC, the Ministry of Health, and health insurers. Health agencies must review and update their information handling practices to comply with the new principle alongside existing privacy obligations under the HIPC.

What changed

  • Amendment No 2 introduces new Information Privacy Principle 3A to the Health Information Privacy Code 2020
  • The new principle reflects updated privacy requirements for handling health information by health agencies in New Zealand

Who is affected

All health agencies in New Zealand, including primary health organisations, medical practitioners (doctors, nurses, dentists, pharmacists, optometrists), aged care facilities, ACC, Ministry of Health, Health Research Council, health insurers, and professional disciplinary bodies

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.