Under New Zealand's Privacy Act 2020 (NZPA), consent refers to the freely given, informed, and specific agreement of an individual to the collection, use, or disclosure of their personal information. While the Act does not explicitly define "consent" in a legal sense, it emphasizes the need for transparency and fairness when handling personal data.

Consent is particularly important under NZPA in the following situations:
- When using personal information for secondary purposes beyond the original intent.
- When sharing personal information with third parties.
- For sensitive information.

The General Data Protection Regulation (GDPR) and New Zealand’s Privacy Act 2020 (NZPA) share a focus on personal data protection but differ significantly in scope, enforcement, and requirements. GDPR applies across the EU and to organizations worldwide that process data of EU residents, while NZPA applies primarily to entities in New Zealand, with limited extraterritorial scope. GDPR mandates stricter rules for consent, requiring it to be explicit, informed, and unambiguous, whereas NZPA allows for implied consent in some cases.

To assure NZPA compliance for your business, start by implementing clear data protection policies and procedures. One of the easiest ways to simplify compliance is by using a Consent Management Platform (CMP) like Consentmo, which is designed specifically for Shopify stores. Our app helps you manage cookie consent, data requests, and user rights, verifying your store meets APA requirements without hassle.

Make sure to check out our detailed blog post covering all important notes.