IPP3A Implementation Kit
Your business has a new privacy obligation. Are you ready?
From 1 May 2026, if your business collects personal information about someone from a third party, you may need to tell them what you are collecting, who you are getting it from, and why.
That means understanding what the new requirement involves and how to apply it in practice.
The IPP3A Implementation Kit is designed to help you do that.
Why this matters
This is not a niche issue.
If your business runs credit checks, uses AML/CFT providers, receives information from lenders or insurers, or relies on referrals, there is a good chance you are already collecting personal information from third parties.
In practice, this is likely to require more than a quick update to your privacy policy. You may need to name specific providers, cover key disclosure points, and keep records. In many cases, a line in a privacy policy will not be enough.
That means many businesses may need to review more than one part of their process. Engagement letters, onboarding documents, website privacy wording, referral processes, and the way information is handled for co-borrowers, guarantors, and existing clients may all need attention.
A practical way to respond
The IPP3A Implementation Kit is a practical starting point for businesses that need to put the required changes in place.
It helps you:
· Understand what IPP3A requires.
· Identify where indirect collection happens in your business.
· Put the right wording and templates in place.
· Keep clearer records of the steps taken.
What’s included
The kit includes four practical documents:
User guide
A plain English guide to what IPP3A requires and how to put it into practice.
Wording for key documents
Ready-to-use wording for engagement letters, website privacy wording, privacy policies, and client communications.
Two practical templates
One helps you document the third-party sources your business collects from, why, and how notice is given. The other is a separate template for situations where the normal onboarding documents do not safely cover the collection.
Who this kit is for
The kit is suitable for businesses that collect personal information indirectly as part of their normal work. It is particularly relevant for:
· Financial service providers.
· Accountants.
· Lawyers.
· Real estate agencies.
It will be especially useful for business owners, senior managers, compliance officers, advisers, and others responsible for client onboarding, privacy processes, and document updates.
Important note
This kit is designed to provide practical implementation support. It is general in nature and should be tailored to your business and actual practices before use. More complex or higher-risk situations may still need further advice. If you are unsure or have questions, contact Strategi Compliance.
Need a practical starting point for IPP3A?
For $199 + GST, the IPP3A Implementation Kit helps your business put the required changes in place.
Need a practical starting point for IPP3A?
For $199 + GST, the IPP3A Implementation Kit helps your business put the required changes in place.