No AI-specific law — the Privacy Act 2020 bindsAI Laws in New Zealand
New Zealand has no AI statute and has said it does not intend to pass one: its 2025 national AI strategy relies on existing law and sector regulators. The binding instrument for AI is the Privacy Act 2020, which took effect on 1 December 2020 and applies to any agency handling personal information, including one used to train or run a model. Its thirteen Information Privacy Principles cover purpose-limited collection, collection from the individual concerned, notification, accuracy, retention, security, access and correction, use and disclosure limits, unique identifiers, and cross-border disclosure — and the Privacy Amendment Act 2025 added IPP 3A, in force 1 May 2026, which requires an agency that collects personal information INDIRECTLY (that is, from anyone other than the individual) to notify that individual. That obligation lands squarely on AI systems trained or enriched on data sourced from third parties. Alongside it, the Algorithm Charter for Aotearoa New Zealand commits signatory PUBLIC agencies to transparency about how algorithms inform decisions, human oversight and review of unintended bias; it is a voluntary commitment by government agencies and imposes nothing on private businesses.
Applicable laws
Penalty: No AI-specific penalty exists. Enforcement runs through the Privacy Commissioner, who may issue compliance notices, and through the Human Rights Review Tribunal, which awards damages for an interference with privacy. ⚠️ NO FINE AMOUNT IS PRINTED HERE. legislation.govt.nz answers every request from this project’s egress with an AWS WAF JS-challenge (HTTP 202, empty body), so the Act’s own offence provisions cannot be read directly by this pipeline, and a YMYL figure is not taken from a secondary source. Read the Act at the source link for the current amounts.
Live legislative tracker
Updated August 28, 2026AI and digital-regulation bills in motion and instruments in force in New Zealand, pulled automatically from the official legislature feed.
Guidance & voluntary frameworks (2)
New Zealand has no binding AI-specific legislation in force that we track. That does not mean AI is ungoverned there. The official frameworks below are in effect and set out what regulators expect — and general law (data protection, consumer protection, sectoral and anti-discrimination rules) still applies to AI systems in the ordinary way. None of these is legislation and none creates a legal obligation by itself, so they are counted separately from binding law — never added to it. See our scope definition.
New Zealand's Strategy for Artificial Intelligence: Investing with confidence
Official New Zealand Government public-sector charter for transparent, accountable and ethical use of algorithms, including advanced analytics and machine-learning-like systems. It is a voluntary commitment by signatory agencies, not binding legislation or an enforcement decision.
Algorithm Charter for Aotearoa New Zealand
High-risk industries to watch in New Zealand
US-based? Check your state laws too
If you're a US company serving New Zealand customers, you need to comply with both your state's AI laws and New Zealand regulation.
Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Aug 31, 2026. See our methodology.
- ↗legislation.govt.nzhttps://www.legislation.govt.nz/act/public/2020/0031/latest/whole.html
- ↗privacy.org.nzhttps://www.privacy.org.nz/privacy-act-2020/privacy-principles/
- ↗digital.govt.nzhttps://www.digital.govt.nz/standards-and-guidance/data/algorithm-charter-for…