Data protection, age limits and prize reporting for contest entries in New Zealand
Contest data protection in New Zealand is governed by the Privacy Act, which allows an organiser to collect only the personal information necessary for a lawful purpose. Conditions of a sales promotion cannot be changed once the competition has started, a rule the Department of Internal Affairs enforces. Winnings from a raffle, Lotto or prize money in a draw are generally not taxable, according to Inland Revenue. This page answers what rules apply to contest entries, whether a minimum age exists, how prizes are taxed, how long entrants' data can be kept, when marketing consent is needed and what an organiser must tell entrants about the information it holds.
Facts last tested on 8 October 2026.
Collection: what an organiser gathers from entrants
The Privacy Act sits behind every entry form in the country. It permits collection of personal information only when that information is necessary for a lawful purpose, a wording the Office of the Privacy Commissioner uses when it explains how organisations should gather data. For a contest, the lawful purpose is running the competition: picking a winner, contacting that winner, and verifying the entry if the terms say so. An entry form built around that purpose asks for a name, a contact address and whatever the mechanics require, and stops there. Everything else is optional unless the entrant agrees to it separately.
The necessary-information test has real consequences for a typical online contest. A photo vote needs the photo and a way to reach the entrant. A public vote with a single-vote-per-person rule needs enough detail to deduplicate entries, which the organiser should name in advance. A prize draw needs a contact for the winner. None of those purposes requires, say, a full birth history or an employer's name, and an organiser that demands them is collecting beyond what the Act allows. The Privacy Commissioner's wording is short enough to quote back at any form that overreaches: necessary for a lawful purpose, nothing more.
Collection also has a public face. Because the information is gathered for a stated purpose, the purpose should be visible before an entrant types anything, not revealed after. A checkbox buried at the bottom of a page is not the same as a sentence that says what will happen to the data. The practical test a reader can apply is simple: for each field on the form, ask what the contest needs it for. If no answer comes to mind, the field exists for someone else's benefit, and the entrant is the one paying for it with personal information.
- Necessary for a lawful purpose is the whole test; every field on an entry form has to earn its place against it.
- A deduplication rule is a lawful purpose, but the organiser should say which details it uses before entries open.
- Extra fields beyond name and contact details deserve a question from the entrant, not automatic agreement.
- The Office of the Privacy Commissioner publishes the collection rules; its wording fits any entry form, large or small.
Retention and marketing consent for entry data
How long an organiser keeps an entrant's information follows from why it was collected. The Privacy Act ties holding data to the purpose it was gathered for, so once a contest has been run, the winner paid and the results published, the purpose is spent. An organiser cannot quietly turn an entry list into a marketing database without telling people and asking them. Retention periods live in the organiser's own privacy statement, and the honest ones state a period or a trigger, such as deleting entries ninety days after the winner is announced. No supplied source sets a fixed national number for contests.
Marketing is a separate purpose, and it needs its own consent. An entry given to win a prize is not an entry given to receive newsletters, offers or sponsor messages, and treating the two as one is a classic overreach. The clean structure is a distinct, unticked box for marketing consent, worded so the entrant knows who will send what. An entrant who skips the box still keeps a valid entry. Where a source does not say otherwise, that separation is what the necessary-purpose test pushes organisers toward, and readers can check for it in seconds.
The same logic answers what an organiser must tell entrants. At the point of collection the entrant should learn the purpose, what happens if they refuse, who holds the information and how to ask for it back. Those statements are not decoration; they are how a person exercises any control over their own data at all. A contest page that says none of them leaves the entrant guessing, and guessing is the condition in which over-collection thrives. Read the statement before entering, and treat its absence as information about the organiser rather than a reason to fill the form faster.
- Once the winner is paid and the contest closes, the collection purpose is spent and deletion becomes the default.
- Marketing consent must be its own, separate choice; an entry is not a subscription.
- Look for a stated retention period in the privacy statement; no fixed national figure exists for contest entries.
- Purpose, refusal consequences, holder and access route belong in the collection statement, visible before the form.
Age limits and the terms that govern entry
No row in the sourced material states a national minimum age for entering a contest, so this page refuses to invent one. What the sources do show is how entry conditions work in this country. The Department of Internal Affairs governs sales promotions and states that conditions cannot be changed once the competition has started. Age rules therefore live where an entrant can read them in advance: in the published terms of the specific promotion, set by the organiser within whatever wider rules apply to its category. A reader who wants the age limit for a particular contest reads its terms, not this page.
The fixity rule is the useful half of the picture. Because conditions cannot change mid-competition, an age limit printed at entry stays the age limit through the final, and an entrant who qualified on day one cannot be disqualified by a rewritten rule on day ten. That protection cuts both ways: an entrant who was under the stated limit at entry was never qualified, however far the vote count climbed. The practical advice is to check the conditions before entering and to keep a copy, since the published version at entry time is the one that governs.
Sales promotion schemes run alongside a brand or a product fall under the Department of Internal Affairs' gambling framework, which is why that department, and not a consumer body, publishes the rules promotions must follow. The classification matters for entrants too. A promotion inside that framework carries enforceable conditions; a casual giveaway on a social platform carries only whatever the platform's own rules and the organiser's word provide. Knowing which kind of contest you are entering tells you how much weight its terms actually have, and that is worth thirty seconds of reading before the form.
- No sourced source sets a national minimum contest age; the number lives in each promotion's own terms.
- Conditions cannot be changed once the competition has started, which freezes the age limit and every other rule at entry time.
- Keep a copy of the terms as published when you entered; that version governs the whole contest.
- Sales promotions fall under the Department of Internal Affairs' framework; a social giveaway may carry only platform rules.
Prizes, tax and the reporting of winnings
Prize tax in New Zealand starts from a distinction Inland Revenue draws plainly. Winnings from a raffle, Lotto or prize money in a draw are generally not taxable, in the department's own words on taxing prize money. The qualifier matters: that statement covers windfall-style wins, where the prize arrives by luck rather than through activity that itself produces income. An entrant who wins a draw for a holiday or an appliance falls on the clear side of it. An entrant whose contest entry is part of a trade, a business or a repeated income-producing pattern is in different territory, and the department's guidance is where that territory is mapped.
The distinction between a lucky win and taxable activity is the line readers should carry away. A one-off public vote won by a member of the public is a windfall. A photographer who wins a judged prize connected to an ongoing photography business, or a person who enters contests systematically as a scheme to produce income, sits closer to the taxable side, because the activity resembles the way they earn. Inland Revenue publishes the principles; this page does not decide anyone's tax position, and no sentence here is a ruling on a specific prize. When a prize is large or the pattern is unusual, ask the department or a tax professional.
Reporting follows the same line. A non-taxable windfall does not create an income tax return entry in the ordinary case, which is why the department's guidance can be so short. Where prize money is taxable, it is income, and it belongs in the return like any other income, whatever form it took. The practical checklist is short. Note what kind of contest produced the prize. Note whether the activity behind it was personal or business-like. If the answer is personal and one-off, the general rule covers it. If the answer is anything else, the prize needs a closer look before filing season.
- Raffle wins, Lotto and draw prizes are generally not taxable under Inland Revenue's stated rule.
- The windfall rule covers luck; a prize tied to a business or a repeated income pattern is different.
- Taxable prize money is income and belongs in the return, whatever form the prize took.
- No sentence on this page is a tax ruling; large or unusual prizes deserve a direct check with Inland Revenue.
Where the rules stand
Three public bodies shape the rules around a contest entry. The Office of the Privacy Commissioner explains the Privacy Act, which limits what an organiser collects and what it must say about that collection. The Department of Internal Affairs publishes fact sheets on sales promotions, the competitions that run alongside a product or a brand, and it fixes the conditions once the promotion has begun. Inland Revenue decides when a prize counts as income. Together these three sources cover the whole life of an entry: the form a person fills in, the terms the organiser publishes, and the moment a winner is drawn and a prize changes hands. Nothing on this page replaces those sources; it condenses them into a checklist a reader can work through before pressing enter.
What we refuse
This page does not give legal advice, and it never replaces the published conditions of a specific contest. It does not help anyone inflate a vote count, run automated entries or get around a platform's checks, and it names no service that sells engagement of any kind. No price appears here, because prices belong in a direct answer to a request, not on a reference page. It does not guess a national minimum age that no supplied source states, and it does not claim every prize is tax free, because Inland Revenue's own wording is qualified. Where a source stops, this page stops.
Typical questions
The Privacy Act applies, and its core rule for organisers is narrow: an organisation can collect personal information only when the collection is necessary for a lawful purpose, as the Office of the Privacy Commissioner states. For a contest the lawful purpose is running the competition, so the entry form should gather what picking and contacting a winner requires and nothing beyond it. The same framework drives what the organiser says at collection, how long it holds the data and whether entry details can be reused for marketing. Anything an organiser collects outside that purpose is collection it cannot justify under the Act.
No supplied official source names a national minimum age for entering a contest, so any page quoting a single number is inventing it. What the rules do fix is the mechanism: the Department of Internal Affairs requires that sales promotion conditions cannot be changed once the competition has started, which means the age condition printed in the terms at entry governs the whole contest. The age limit for any specific promotion is therefore published in that promotion's own conditions, set by the organiser within the wider framework that applies to its category. Read the terms before entering, and keep the version you read.
Generally, no, for the common case. Inland Revenue states that if someone wins a raffle, Lotto or prize money in a draw, these winnings are not taxable. The department's wording carries a qualifier because the exemption rests on the win being a windfall rather than the product of income-producing activity. A one-off draw prize won as a member of the public sits on the clear side of the line. A prize connected to a business, or contests entered systematically to produce income, moves toward the taxable side. When the pattern is unusual, the department's guidance on taxing prize money is the place to check before filing.
As long as the purpose of collection lasts, and not much longer. The Privacy Act ties retention to the lawful purpose, so once a contest has been judged, the winner contacted and the result published, the reason for holding the entries is spent. No supplied source sets a fixed national retention period for contest entries; honest organisers state their own period in the privacy statement, whether that is a number of days or a trigger such as deletion after the announcement. An entrant who finds no stated period in the statement has learned something about the organiser, and can ask directly how long the data is held.
Marketing is a purpose of its own, separate from running the contest, so it needs consent of its own. An entry submitted to win a prize is not an entry submitted to receive newsletters or sponsor offers, and an organiser that merges the two is collecting beyond what the entry was given for. The clean structure, which the necessary-purpose test pushes toward, is a distinct and unticked marketing box on the form, with the entry remaining valid whether the box is ticked or left empty. An entrant can decline marketing consent, keep their place in the contest, and withdraw that consent later if they granted it.
At the point of collection, the organiser should state the purpose the data serves, what happens if an entrant refuses to provide it, who will hold it, and how the entrant can see or correct it later. Those statements are what let a person exercise any control over their own information, and the Privacy Act's purpose-limitation principle gives them force: data gathered for one purpose cannot drift into another without the entrant knowing. A contest page that omits them leaves the entrant guessing about every field on the form. The Office of the Privacy Commissioner's guidance on collection is the reference point for what a proper statement looks like.