If you employ people, a new privacy rule called IPP3A comes into force on 1 May 2026. It’s closer than many employers realise, and it affects a lot of everyday business practices.
IPP3A applies whenever personal information about an employee or candidate is collected from someone else, not directly from them. That includes things like:
- Police vetting and reference checks
- Payroll processing and outsourced HR support
- CCTV, GPS tracking, and time and attendance systems
- Information held by accountants, IT providers, or other service partners
Put simply, IPP3A is about people knowing who may have their personal information, when, and why – and avoiding surprises. With the change now nearly here, this is the right time to check whether your documents, systems, and day to day communications are still fit for purpose.
Other employment law changes you shouldn’t ignore
While working through IPP3A, it’s also worth stepping back and checking whether you’re across other employment law changes that are already in force or coming close behind.
Rather than treating these as isolated updates, we’ve pulled them together so you can see what actually needs attention now, as opposed to what can wait. It is a bit of a read, but we’ve set everything out in plain English, with short, practical checklists to help you identify where to focus.
Read the full update here
If you’re busy, start with the quick checklist to identify your priority actions and any immediate risks.
If you want help working through what’s relevant to you, your usual Grow HR consultant is here to help. You can also contact us at team@growhr.co.nz.