Part 3 s 31 Privacy Act 2020 Version as at 6 December 2023 (7) The Commissioner may not grant an authorisation under subsection (6) in respect of any specified personal information if the individual concerned objec‐ ted. (8) An authorisation granted under subsection (6) may be subject to any conditions that the Commissioner considers appropriate. (9) The Commissioner must maintain on the Commissioner’s Internet site a list of current authorisations granted under this section. Compare: 1993 No 28 s 54 31 Enforceability of IPPs (1) Except as provided in subsection (2), the IPPs do not confer on any person any right that is enforceable in a court of law. (2) The entitlements conferred on an individual by IPP 6(1), to the extent that those entitlements relate to personal information held by a public sector agency, are legal rights and are enforceable in a court of law. Compare: 1993 No 28 s 11 Subpart 2—Codes of practice 32 Codes of practice in relation to IPPs (1) The Commissioner may at any time issue a code of practice in relation to the IPPs. (2) A code of practice may— (a) (3) (4) (i) prescribing more stringent or less stringent standards: (ii) exempting any action from an IPP, either unconditionally or con‐ ditionally: (b) apply 1 or more of the IPPs without modification: (c) prescribe how 1 or more of the IPPs are to be applied or complied with. A code of practice may apply in relation to 1 or more of the following: (a) any specified information or class or classes of information: (b) any specified agency or class or classes of agency: (c) any specified activity or class or classes of activity: (d) any specified industry, profession, or calling or class or classes of indus‐ try, profession, or calling. A code of practice may also— (a) 36 modify the application of 1 or more of the IPPs by— impose, in relation to any private sector agency, controls in relation to the comparison (whether done manually or by means of any electronic or other device) of personal information with other personal information

Select target paragraph3