Q2 2026 platform update: bridge, inbox, bureaus, and what is next
Fifteen weeks after launch, DEIS has shipped bridge filing, individual inbox tools, MFA, and MoJ integration — with analytics dashboard up next.
Historical articles from across the Forman Pacific portfolio. Filter by source or open the origin article.
Fifteen weeks after launch, DEIS has shipped bridge filing, individual inbox tools, MFA, and MoJ integration — with analytics dashboard up next.
Privacy Week is a good time to audit third-party lookups. These five IPP3A mistakes show up in OPC complaints and customer support tickets alike.
Completed a Carjam or PPSR search in the browser? The bridge certify step attaches site reference, snapshots, and screenshots to your lookup record.
If the Privacy Commissioner asks how you satisfied IPP3A for specific lookups, your DEIS evidence log is designed to answer that question in one export.
We are building a comprehensive analytics dashboard that gives you visibility into your lookup patterns, compliance rates, and team activity.
An updated checklist covering all your obligations when accessing personal information from third-party data sources in 2026.
Ask DeisChat about IPP3A pathways, evidence exports, integrations, and how to use DEIS — directly from the business portal sidebar.
For high-security environments, you can now enable multi-factor authentication alongside magic-link login.
The DEIS individual portal now supports a full Gmail-style inbox for privacy notifications, access requests, and responses from organisations.
The DEIS mobile app is now available for iOS and Android. Run lookups, check your evidence trail, and manage notifications on the go.
Hotels, motels, and tour operators run credit checks, reference checks, and licence verifications — often without recording how IPP3A was satisfied.
Thirty days after launch, individuals are opening notifications, viewing lookup details, and submitting IPP6 requests — here is what the first month showed.
Universities and polytechnics accessing student data from NZQA, StudyLink, or other institutions must comply with IPP3A. Here is how.
The DEIS browser extension brings IPP3A evidence capture to Carjam, PPSR, and other bureau sites — without leaving the page you already use.
Search Ministry of Justice court records through DEIS with full IPP3A compliance. Available now for eligible subscribers.
In our first week live, businesses ran lookups across Carjam, PPSR, and credit bureaus — and surfaced three compliance patterns we had not seen in beta.
Freight and logistics companies collect personal information for identity verification and delivery confirmation. Here are the privacy obligations.
Using AI to process personal information from third-party sources creates unique privacy challenges. Here is the current legal position.
illion joins Centrix and Equifax as our third credit bureau integration. All three bureaus, one compliance workflow.
The Government has announced a comprehensive review of the Privacy Act 2020. Here is what is likely to change and how to prepare.
A look back at what we shipped, the privacy landscape changes, and what is coming in 2026.
As NZ moves toward open banking, the privacy implications of API-based financial data sharing are significant. Here is what to prepare for.
The Privacy Act limits how long you can retain personal information. Here is how to set appropriate retention periods for lookup data.
When government agencies share personal information between themselves, IPP3A still applies. Here is how to manage it.
The DEIS API allows developers to integrate IPP3A-compliant lookups directly into their business applications.
Health agencies accessing data from ACC, PHOs, or other health databases have specific privacy obligations. Here is what to know.
Run up to 100 lookups at once with the same IPP3A pathway. Perfect for portfolio reviews and batch processing.
Checking a subcontractor
Equifax joins Centrix as our second credit bureau integration. Run credit checks through either bureau with full IPP3A compliance.
The Privacy Commissioner
DEIS sends notifications to individuals when the notification pathway is selected. Here is how to customise the content and branding.
Telecommunications companies run millions of credit and identity checks annually. Here is how to manage the compliance at scale.
When personal information collected through NZ sources is transferred overseas, additional privacy obligations apply. Here is what you need to know.
A guide for individuals on how to use the DEIS transparency portal to see who has accessed their personal information.
Energy companies share customer data with credit bureaus and access third-party data for credit assessments. Here is how to stay compliant.
Our Carjam integration now includes additional vehicle data fields and significantly faster response times.
USIFDA Officially Launches: Certification Program Goes Live
Final System Testing and Launch Preparation
Website Development and Digital Infrastructure Complete
Certification Badge System Development
Pilot Program Evaluation and Standards Refinement
Pilot Program Phase 2: Full Operational Testing
Pilot Program Launch with Four Industry Leaders
Pilot Program Design and Operator Selection
Legal Framework Documentation and Compliance Requirements Finalized
Certification Standards Development
Stakeholder Interview Program: Comprehensive Industry Research
Accelerated Development Phase: Preparing for Pilot Program
Standards Documentation and Framework Refinement
Legal Framework Research and Compliance Analysis
Industry Stakeholder Engagement and Feedback Collection
Two-Tier Certification Structure Concept Development
Comprehensive Industry Research and Analysis
Initial Stakeholder Discussions and Industry Consultation
Regulatory Framework Research and Documentation
Industry Analysis and Gap Identification
Initial Industry Research and Concept Development
Early Stakeholder Engagement and Industry Consultation
Foundation Work and Initial Planning
USIFDA Inception: Concept Development During COVID-19
Subscribe to Updates
Additional Resources
Quick Links
Resources
Legal & Compliance
Property searches through LINZ Landonline involve personal information about property owners. Here is how to handle the privacy requirements.
If the OPC issues a compliance notice, you need to act quickly. Here is a step-by-step guide to responding.
No passwords to remember or breach. Here is how our magic-link login works and the security measures behind it.
Debt collectors access multiple data sources to trace debtors and assess ability to pay. Here is how to manage the privacy obligations.
When an individual says your records are wrong, you have obligations to correct or annotate. Here is the process.
When someone asks to see what data you hold about them, you have 20 working days to respond. Here is how to handle it.
Lawyers access personal information from multiple sources during litigation and transactions. Here is how to handle the privacy obligations.
DEIS now supports multiple users per business account with role-based access controls. Manage who can run lookups, export evidence, and update settings.
AML/CFT due diligence requirements mean accounting firms access third-party data regularly. Here is how to handle the privacy obligations.
DEIS now offers direct Centrix integration. Here is how to set it up and ensure every credit check is IPP3A compliant.
New Zealand businesses can now run third-party data lookups with automatic IPP3A evidence — and individuals can see who accessed their data — from a single platform at deis.nz.
Your car won\
Step by step guide for what to do after a car accident in New Zealand, including when and how to arrange towing.
Many modern cars don\
Keys locked inside? Here\
If your temperature gauge is in the red, stop driving immediately. Here\
Not all tow trucks are the same. Here\
Understanding how insurance covers towing in New Zealand, and how to make a claim.
EVs need special handling when being towed. Here\
Step-by-step guide to exporting your compliance evidence trail from DEIS for OPC investigations, audits, or internal reviews.
Background checks on job candidates involve multiple third-party data sources. Here is how recruitment agencies can meet their IPP3A obligations.
The Privacy Amendment Act 2024 strengthened enforcement powers and clarified several obligations around third-party data collection.
The NZBN register contains personal information about sole traders and partners. Here is what you need to know.
A step-by-step guide to creating your DEIS account, connecting data sources, and running your first compliant lookup.
Insurers access personal information from multiple third-party sources during claims and underwriting. Here is how to manage compliance.
Connect your Xero account to DEIS and run privacy-compliant lookups on your existing client base without re-entering data.
The Privacy Act 2020 introduced mandatory breach notification. Here is what triggers a notification and what you need to do.
Company and director searches through the Companies Office are one of the most common lookups in NZ. Here is how to stay compliant.
Running background checks on prospective tenants? Here is how to do it without breaching the Privacy Act 2020.
The Personal Property Securities Register is one of New Zealand
Running credit checks through Centrix or Equifax? Every lookup creates IPP3A obligations that most finance companies are not meeting.
Every Carjam or PPSR lookup on a customer triggers IPP3A obligations. Here is how NZ car dealers can stay compliant.
The Office of the Privacy Commissioner has signalled increased scrutiny on third-party data collection practices. Here is what that means for your business.
Information Privacy Principle 3A requires agencies to notify individuals when collecting personal information from third parties. Here is what that means in practice.