Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.
We respect your Do Not Track preference.
The Privacy Act 2020 gives the Privacy Commissioner the power to issue codes of practice that become part of the law. These codes modify the operation of the Privacy Act and set rules for specific industries, organisations, or types of personal information.
Early in 2026 we consulted on code amendments to incorporate IPP3A into our codes of practice, focusing on the codes which replace all of the information privacy principles. We also proposed minor changes to our Civil Defence Code. The changes we made to codes reflect feedback from submitters. Read papers with information on the consultation process, submissions, and changes to codes below.