AI regulation in New Zealand (2026)

MBIE published New Zealand's first national AI strategy alongside 'Responsible AI Guidance for Businesses', cementing a light-touch approach that relies on existing law rather than bespoke AI legislation; industry research cited in the strategy projects generative AI alone could add NZ$76 billion (over 15% of GDP) by 2038. The strategy sets whole-of-economy priorities and cross-government coordination mechanisms for accelerating responsible AI adoption.

The GCDO (Department of Internal Affairs) published a non-binding Public Service AI Framework governing all forms of AI across public sector agencies, followed in February 2025 by dedicated 'Responsible AI Guidance for the Public Service: GenAI' requiring senior-leadership sign-off before any generative AI adoption. Together these constitute the primary operational rules for government AI use, aligned with the OECD AI Principles Cabinet endorsed in 2024.

Minister of Science, Innovation and Technology Judith Collins secured Cabinet agreement to leverage existing laws as AI guardrails, formally adopt the OECD AI Principles, and introduce new regulation only to unlock innovation or address acute risks. The paper established five AI policy domains and directed MBIE to develop a national AI work programme, defining the regulatory philosophy that underpins all subsequent government AI work.

The Office of the Privacy Commissioner issued guidance explaining how the Privacy Act 2020's 13 Information Privacy Principles apply across the full AI system lifecycle, from data collection through to automated decision-making, covering transparency, accuracy, security and accountability. Recommended Privacy Impact Assessments as best practice for AI projects and signalled that existing privacy law is the primary AI accountability mechanism in New Zealand.

The Office of the Privacy Commissioner published expectations under the Privacy Act 2020 specifically addressing generative AI tools: agencies must assess data confidentiality risks, independently fact-check AI outputs, and obtain explicit senior-leadership approval before adoption. Marked the regulator's first substantive engagement with large-language-model risks and set the compliance baseline ahead of the government's broader AI strategy work.

The modernised Privacy Act replaced the 1993 law, introducing mandatory 72-hour breach notification to the Commissioner, extraterritorial reach to offshore entities handling New Zealanders' data, and strengthened Information Privacy Principles. Became the principal statutory instrument governing how AI systems may collect, process, and disclose personal data in New Zealand, underpinning all subsequent AI-specific guidance.

The Minister of Statistics released the voluntary Algorithm Charter with 21 government-agency signatories, committing to transparency, accountability, and human-centred algorithmic decision-making while explicitly embedding Te Ao Māori perspectives and requiring active community engagement. New Zealand's first formal government commitment to algorithmic governance; signatories grew to over 25 agencies by 2023.

The AI Forum New Zealand released seven voluntary principles covering human oversight, privacy, fairness, transparency, robustness, accountability, and the promotion of Māori values in AI systems. The framework became a widely-referenced industry standard and directly informed the government's subsequent Algorithm Charter and privacy guidance work.

The first major independent policy analysis of AI in New Zealand government — funded by the NZ Law Foundation and conducted at the University of Otago — recommended establishing a dedicated AI regulatory body, a public register of government predictive systems, and mandatory bias audits. The report directly influenced the design of the 2020 Algorithm Charter and remains the foundational academic reference for NZ AI policy.

The AI Forum New Zealand, with MBIE backing, released New Zealand's first comprehensive AI economic and social landscape report quantifying productivity gains, identifying workforce and ethical risks, and mapping key opportunity sectors including health, agriculture, and financial services. Set the policy agenda that led directly to subsequent government AI initiatives including the Algorithm Charter, privacy guidance, and the 2025 national strategy.