Just In Time Privacy Notice Template for New Zealand
Generate a bespoke document
What is a Just In Time Privacy Notice?
The Just In Time Privacy Notice serves as a critical tool for organizations operating under New Zealand's Privacy Act 2020, providing transparent and timely information about personal data collection and processing. This document should be implemented at specific points where personal information is being collected, such as during form submissions, account creation, or cookie consent requests. It differs from a general privacy policy by offering contextual, immediate information relevant to the specific data collection taking place. The notice ensures compliance with New Zealand's privacy principles, particularly those relating to purpose of collection, transparency, and use of personal information. It helps organizations meet their legal obligations while building trust with users through clear, timely communication about data practices.
About the Just In Time Privacy Notice
A Just In Time Privacy Notice is a specialized legal document that provides immediate transparency about data collection activities under New Zealand's Privacy Act 2020. Unlike comprehensive privacy policies, this notice delivers contextual information at the exact moment you collect personal information from individuals, ensuring compliance with privacy principles while maintaining user trust.
When do you need this document?
You need a Just In Time Privacy Notice whenever you collect personal information through specific touchpoints such as website forms, mobile app registrations, newsletter signups, or survey responses. This document is particularly crucial during cookie consent processes, social media integrations, or when implementing new data collection features on your platform. The notice becomes essential when your general privacy policy doesn't adequately address the specific collection context, or when you're gathering sensitive information that requires additional transparency. Organizations conducting market research, collecting feedback, or processing payments also benefit from implementing these targeted notices to maintain regulatory compliance.
Key legal considerations
The Privacy Act 2020 requires that your notice clearly identifies the purpose of collection, ensuring individuals understand why their information is being gathered. You must specify what personal information you're collecting, how it will be used, and whether it will be disclosed to third parties or overseas recipients. The notice should include information about data retention periods and security measures protecting the information. Under the Fair Trading Act 1986, your notice must be accurate and not misleading, avoiding vague language or hidden clauses that could confuse users. If you're using the information for direct marketing, compliance with the Unsolicited Electronic Messages Act 2007 becomes relevant, requiring clear opt-in mechanisms and unsubscribe options.
Legal requirements in New Zealand
New Zealand's Privacy Act 2020 mandates that organizations follow specific privacy principles when collecting personal information. Your Just In Time Privacy Notice must comply with Principle 1, which requires that information be collected for lawful purposes connected with your organization's functions. You must ensure the collection is necessary for those purposes and that individuals are made aware of the collection. The notice must be provided in a clear and accessible format, available in English and in other languages if your audience requires it. Under the Electronic Transactions Act 2002, electronic delivery of privacy notices is legally valid, but you must ensure individuals can easily access and understand the information. The Privacy Act also requires that you inform individuals of their rights to access and correct their personal information, and your notice should include contact details for privacy-related inquiries or complaints.
GOVERNING LAW
Applicable law
This Just In Time Privacy Notice is drafted to comply with New Zealand law. Key legislation includes:
Electronic Transactions Act 2002: Governs the legal validity of electronic transactions and communications, ensuring that electronic consent and information provision are legally valid
Fair Trading Act 1986: Prohibits misleading and deceptive conduct in trade, ensuring privacy notices are clear, accurate and not misleading to consumers
Unsolicited Electronic Messages Act 2007: Regulates commercial electronic messages and requires consent for direct marketing communications, which may need to be addressed in privacy notices
Contract and Commercial Law Act 2017: Provides the general framework for contract formation and validity, including requirements for clear communication of terms
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it