Collection of personal information from third parties
From 1 May 2026, if we collect personal information about you from a source other than you directly, we will take reasonable steps to notify you of that collection as soon as reasonably practicable, unless an exception under the Privacy Act 2020 applies.
This notification will typically include:
confirmation that we have collected personal information about you
the purpose for which the information was collected
who may receive the information
the name and contact details of the agency collecting and holding the information
whether the collection is required or authorised by law (if applicable)
your right to request access to and correction of your personal information.
We may not provide this notification where an exception applies under the Privacy Act, including where the information is publicly available, where you have already been notified, where it would be impracticable to notify you, or where notification would prejudice the purpose of collection (for example in relation to investigations).