Privacy help for Aotearoa. Free.
Guides, tools and templates for people protecting themselves and organisations meeting the Privacy Act. Written for Aotearoa, checked against the law, free to use and adapt.
- Cost
- Free, no sign-up
- Tracking
- None
- Sources
- 110 checked
- Licence
- CC BY 4.0
- Something is happening now Scams, hacked accounts, threats, harassment, images shared without consent. What to do first and who to call. Get help now
- Protect myself and my whānau Find out what's public about you, lock down accounts, deal with harassment, and use your rights under the Privacy Act. 10 guides
- Run privacy at my organisation The Privacy Act in plain language, breach response, IPP 3A, biometrics, AI, and templates you can adopt today. 12 guides, 15 templates
Questions New Zealanders ask
Short, sourced answers. Each starts with the answer, then the detail and what you can do.
All 23 answers, current scams and the glossary
- Is it legal to record a conversation or phone call in New Zealand?
- Can my neighbour's security camera point at my house?
- What can my employer monitor or collect about me at work?
- What information can a landlord or property manager ask for in New Zealand?
- How do I get a copy of my medical records in New Zealand?
- How do I remove my personal information from Google search results?
- Are deepfakes illegal in New Zealand?
- Does my New Zealand business need a privacy policy?
What has changed in New Zealand privacy law
The last 13 months moved more than the five years before them. If your privacy statement or processes were written before this, they probably need work.
Tools that run in your browser
Nothing you type leaves your device, and there's nothing to sign up for.
- Privacy Act deadline calculatorWork out the last day an agency has to respond to a request for your personal information, using the statutory definition of a working day.
- Request letter builderWrite a request for the personal information an organisation holds about you, a correction request, or a follow-up when they miss the deadline.
- Breach assessment recordWork through the serious-harm factors in section 113 of the Privacy Act and leave with a written record of your decision.
- Indirect collection check (IPP 3A)Since 1 May 2026, if you get someone's personal information from anyone other than them, you usually have to tell them. Check whether you must, and draft the notice.
- Personal exposure auditWork through the places New Zealanders' names, addresses and routines are most often published, check yourself, and fix what you can.
- Privacy self-check for organisationsRate your organisation against the ten pou of the Privacy Commissioner's Poupou Matatapu guidance and get a prioritised list of what to fix first.
From the blog
What's changing in New Zealand privacy and online safety, and what to do about it.
Why this is free
Much of what privacy consultancies charge for is applying publicly accessible guidance and law to ordinary situations. The method can be written down, so we wrote it down.
Some things are still worth paying for, such as help when you're facing a legal challenge, incident response and forensic help after a cyber attack, or a specialist for a complex impact assessment. We say so plainly.