On 1 May 2026, changes to the Privacy Act came into force. These changes directly impact how and when you share personal information with third party providers (such as insurers, underwriting agencies, loss adjusters, claim repairers, and other
service providers).
Under the new Information Privacy Principle (IPP3A), any agency collecting personal information indirectly must notify individuals that their information has been collected. However, IPP3A(3) allows an exception if the individual has already been clearly informed
of the following:
• The fact that the information has been collected
• The purpose of the collection
• The intended recipients of the information
• The name and address of the agency that is collecting the information, and the agency that holds the information
• If the collection is authorised or required by law, which particular law
• Their right to access and correct their information.
These are mandatory disclosures, and failing to meet them may result in non-compliance.
To help brokers, IBANZ has developed a dedicated webpage linking to privacy policy statements from general and fire insurance providers and underwriters, making it easier for you to meet notification requirements. You can refer clients to the insurer/underwriter privacy statements listed on our site in order to satisfy your IPP3A(3) requirements.
If you work with insurers or underwriters not included on our webpage, you are responsible for providing clients with the appropriate privacy policy information before personal client information is shared. Alternatively, get in touch with IBANZ and we can update our privacy statements list.
Our privacy statements list is one practical way that IBANZ seeks to help our members comply with the 1 May 2026 Privacy Act changes. You can find out more by viewing our Privacy Statements List on our website here: https://ibanz.co.nz/Privacy-Statements/10642/
