free tools · privacy one-pager

Know which rules apply. Hand it to your team.

A one-page Privacy Act 2020 summary for your organisation: your data flows mapped to the 13 privacy principles and the new IPP 3A. A draft for you to check, not legal advice.

New since 1 May 2026 · IPP 3A

IPP 3A covers personal information you collect about someone from someone else, such as a referrer, another business or a family member. Since 1 May 2026 you must take reasonable steps to tell the person, as soon as reasonably practicable, unless an exception applies.

Source: Office of the Privacy Commissioner, IPP 3A · checked 8 November 2026 · all the principles

About your organisation

Organisation nameSectorBrief description of what you doWhat personal information do you collect?

Names and contact detailsDates of birthAddressesPayment detailsHealth informationChildren's informationStaff recordsCustomer messagesImages or videoLocation dataWebsite analytics

Other personal informationWhere does the information come from?Do you collect information about people from someone else?

For example a referral, another business, a parent about a child, a recruiter, or a list you bought. This decides whether IPP 3A applies.

YesNoNot sure

Who do you share it with?

Where is it stored?Retention period

assembl.

Website check Dealers Customer journeys Lab DO Workforce plans Dashboard sign-in Connect for developers About Trust Where your data goes Te Tiriti Contact

Privacy Terms Disclaimer Meta data deletion