New Zealand Privacy Act 2020, IPP 11: no disclosure to another party unless the purposes, the person's authorisation or an exception allows it (Privacy Act 2020, s 22, information privacy principle 11(1) and (2) (text as published by the Privacy Commissioner))
Handing records to a buyer is a disclosure. It is allowed if the disclosure is one of the purposes the information was obtained for or directly related to them, if the person authorised it, or if the buyer will use it in a form in which the person is not identified; none of the other exceptions (law enforcement, serious threat, sale of a business as a going concern) fits a data licence on my reading. Any disclosure to a foreign buyer is also subject to IPP 12. The text was read on the Privacy Commissioner's page.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“An agency that holds personal information must not disclose the information to any other agency or to any person unless the agency believes, on reasonable grounds, ... that the disclosure is authorised by the individual concerned; ... is to be used in a form in which the individual concerned is not identified; ... This IPP is subject to IPP 12.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide