IPP3A: notification requirements for indirect collection of personal information.
From 1st May 2026, new privacy requirements apply to health information received from sources other than the patient. This is called indirect collection.
For our practice, this may include information received from other health services or agencies involved in your care, such as hospitals, specialists, laboratories, radiology clinics, pharmacies, ACC, Health NZ Te Whatu Ora, Oranga Tamariki, PHOs, or other health providers.
Read more about the changes here:
https://www.privacy.org.nz/resources-and-learning/a-z-topics/ipp3a/