The NZ Privacy Act has changed

From May 1st, if you gather personal data from a source other than the individual themselves, you need inform them clearly what and why you have their data and how you intend to use it.