Privacy Commissioner guidance on AI and the information privacy principles (September 2023): training AI must be clear when information is collected (Office of the Privacy Commissioner, Artificial Intelligence and the Information Privacy Principles, September 2023, section on use and disclosure)
The Commissioner applies the purpose rules to AI: existing records cannot be repurposed for a new purpose unless it is directly related, authorised by law or an exception applies, and training an AI tool must be made clear when the information is collected. A holder whose notices did not say so cannot rely on them for an AI-licensing purpose and needs the person's authorisation or non-identified data. This is guidance written for businesses using AI tools, not a rule about licensing records to a buyer, and it is not law.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“In general, you cannot repurpose existing information for a new purpose unless it is a directly related purpose, or when authorised by law, or when a specific exception applies. ... if you want to use personal information to train an AI tool, you need to make sure that is clear at the time you collect it.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide