New Zealand Privacy Act 2020, IPP 10: personal information may be used only for the purpose it was obtained for, with exceptions (Privacy Act 2020, s 22, information privacy principle 10(1) (text as published by the Privacy Commissioner))
A business may use personal information for another purpose only if it believes on reasonable grounds that the use is directly related to the original purpose, or the information will be used in a form in which the person is not identified, or the person has authorised it, or another listed exception applies. Using records to prepare them for AI training is a new purpose; the holder needs the person's authorisation or a non-identified form. The legislation.govt.nz copy walls off scripts, so the text was read on the Privacy Commissioner's own page, which reproduces the principle.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“An agency that holds personal information that was obtained in connection with one purpose may not use the information for any other purpose unless the agency believes, on reasonable grounds, ... is to be used in a form in which the individual concerned is not identified; ... that the use of the information for that other purpose is authorised by the individual concerned;”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides