Part 3 s 23 (1) (2) (3) (4) (5) Privacy Act 2020 Version as at 6 December 2023 Information privacy principle 13 Unique identifiers An agency (A) may assign a unique identifier to an individual for use in its operations only if that identifier is necessary to enable A to carry out 1 or more of its functions efficiently. A may not assign to an individual a unique identifier that, to A’s know‐ ledge, is the same unique identifier as has been assigned to that indi‐ vidual by another agency (B), unless— (a) A and B are associated persons within the meaning of subpart YB of the Income Tax Act 2007; or (b) the unique identifier is to be used by A for statistical or research purposes and no other purpose. To avoid doubt, A does not assign a unique identifier to an individual under subclause (1) by simply recording a unique identifier assigned to the individual by B for the sole purpose of communicating with B about the individual. A must take any steps that are, in the circumstances, reasonable to ensure that— (a) a unique identifier is assigned only to an individual whose iden‐ tity is clearly established; and (b) the risk of misuse of a unique identifier by any person is mini‐ mised (for example, by showing truncated account numbers on receipts or in correspondence). An agency may not require an individual to disclose any unique identi‐ fier assigned to that individual unless the disclosure is for one of the purposes in connection with which that unique identifier was assigned or is for a purpose that is directly related to one of those purposes. Compare: 1993 No 28 s 6 23 Application of IPPs in relation to information held overseas An action taken by an agency in relation to information held overseas does not breach any of the IPPs if the action is required by or under the law of any coun‐ try other than New Zealand. Compare: 1993 No 28 s 10(3) 24 Relationships between IPPs and other New Zealand law (1) Nothing in IPP 6, 11, or 12 limits or affects— (a) a provision contained in any New Zealand enactment that authorises or requires personal information to be made available; or (b) a provision contained in any other New Zealand Act that— (i) 32 imposes a prohibition or restriction in relation to the availability of personal information; or