1Citation
These regulations are the Privacy and Responsible Information Sharing (Privacy) Regulations 2025.
Parliamentary material from the official source. Links open the official source in a new tab.
Bill homepageThese regulations are the Privacy and Responsible Information Sharing (Privacy) Regulations 2025.
These regulations come into operation on 1 July 2025.
If a provision of Part 2 of the Act requires or permits the Information Commissioner to make a document publicly available, the Commissioner must comply with that requirement or exercise that power by —
publishing the document on a website maintained by, or on behalf of, the Information Commissioner; and
making a hard copy of the document available for inspection on request during business hours at the principal office of the Information Commissioner.
Example for this regulation:
Privacy guidelines must be made publicly available under section 148(4) of the Act.
[Regulation 3 inserted: SL 2026/131 r. 4.]
A notice or other document that is required or permitted to be given to the Information Commissioner under Part 2 of the Act may be given by —
sending it in an electronic form to an email address of the Information Commissioner specified on a website maintained by, or on behalf of, the Information Commissioner for that purpose; or
lodging it in an electronic form using an online system maintained by, or on behalf of, the Information Commissioner for that purpose.
A notice or other document that is required or permitted to be given to a person by the Information Commissioner under Part 2 of the Act may be given by —
if the person has provided an email address for giving documents — sending it in an electronic form to the email address provided by the person; or
making it available to the person in an electronic form using an online system maintained by, or on behalf of, the Information Commissioner for that purpose and notifying the person by email sent to an email address provided by the person that it is available.
The notice or other document is taken to be given —
if given under subregulation (1)(a) — at the time it reaches the email address of the Information Commissioner; or
if given under subregulation (2)(a) — at the time it reaches the email address provided by the person; or
if given under subregulation (1)(b) or (2)(b) — at the time it is lodged or made available in the online system.
This regulation does not limit the application of the Interpretation Act 1984 sections 75 and 76 to the notice or other document.
[Regulation 3A inserted: SL 2026/131 r. 4.]
In this regulation —
annual report means a report required under the Information Commissioner Act 2024 section 32.
Section 146 of the Act does not require an annual report for a financial year to include any information about a matter relating to a provision of the Act if the provision has not come into operation before the end of that financial year.
Note for this regulation:
For example, the annual report for a financial year is not required to include information about the number of privacy complaints made in the financial year if section 82 of the Act has not come into operation before the end of the financial year.