Before You Put Data Into AI

5 minutes. 20 questions. Instant verdict on whether your data is ready for AI — under NZ law.

7 parts · 20 items · ~5 minutes

NZ Data Classification Checklist

Run this checklist before putting any data into an AI tool. It covers the NZ Privacy Act 2020, IPP3A (in force 1 May 2026), and Māori Data Sovereignty principles.

Privacy Act 2020 + IPP3A compliance

Covers the new Information Privacy Principle 3A that comes into force 1 May 2026, requiring notification when data is obtained indirectly.

Māori Data Sovereignty principles

Ensures Māori data is identified early and that collective governance — not just individual consent — is considered before AI processing.

Instant compliance verdict

Receive a Clear, Review Required, or Stop result based on your answers — with specific issues and recommended next steps.

For guidance only — not legal advice. Complex or high-risk cases should be reviewed by a qualified privacy professional.

Based on the NZ Privacy Act 2020, IPP3A (in force 1 May 2026), and Māori Data Sovereignty principles. For complex or high-risk cases, consult a qualified privacy professional.