New Zealand - Digital Strategy (2022)

Overview

The Digital Strategy for Aotearoa (September 2022) sets the national ambition that "Aotearoa New Zealand’s people, communities, economy, and environment are flourishing and prosperous in the digital era." It is framed around three themes—Mahi Tika (Trust), Mahi Tahi (Inclusion) and Mahi Ake (Growth)—and establishes goals, high-level measures and a first Action Plan (2022/23). The Strategy was developed by a cross-agency team (MBIE, DIA, DPMC, Stats NZ and the National Cyber Security Centre) with public engagement in late 2021 and is supported by the Digital Executive Board to coordinate implementation. For the full text see Digital Strategy for Aotearoa (PDF) and the web summary at digital.govt.nz.

Definitions

The Strategy defines 'digital' broadly to include computing hardware and software, the supporting infrastructure, and the data integral to those systems. It treats 'digital' as socio-technical systems—covering rules, policies, design, data provenance, cultural frameworks (including Te ao Māori perspectives) and the social and environmental impacts that result from the use of technologies. Key terms used in implementation materials include 'Digital Executive Board' (the cross-agency governance body), 'Action Plan' (the rolling implementation roadmap), 'flagship initiatives' (prioritised projects) and 'measures' (high-level indicators under each theme).

Governance and Institutional Framework

Implementation is led through a whole-of-government architecture anchored by the Digital Executive Board, hosted by the Department of Internal Affairs and established under Public Service institutional arrangements. The Board provides system-level oversight, prioritisation and coordination of cross-agency activity and reports on progress through Ministerial channels. The Strategy anticipates that agencies will use procurement, funding, policy, and regulation levers to deliver on priorities, and that the Action Plan will be refreshed every 12–18 months to respond to emerging risks and opportunities. The Strategy also names responsible contributor agencies and stresses the Crown’s obligation to Te Tiriti o Waitangi / the Treaty of Waitangi; Māori data governance is an explicit institutional priority. Relevant statutory frameworks that underpin governance include the Public Service Act 2020 and privacy and information laws, which remain key delivery levers.

Key Focus Areas

The Strategy’s three themes structure priorities: (1) Mahi Tika — Trust: online safety, ethical and culturally-appropriate data use, resilience of digital infrastructure and alignment with New Zealand’s cyber security workstreams; (2) Mahi Tahi — Inclusion: universal access, affordability, skills and capability development, accessibility, and targeted support to close digital divides (including focused initiatives for rural communities and tāngata whenua); and (3) Mahi Ake — Growth: enabling business innovation, exporting digital goods and services, stimulating a diverse tech talent pipeline, and supporting sustainable, low-carbon technology development. Flagship initiatives listed in the Action Plan include Digital Boost, Māori Data Governance, Digital Identity Services Trust Framework, Data as a tool for decision-making, and the Digital Technologies Industry Transformation Plan. These focus areas connect to measurable outcomes—e.g., improved access, reduced economic impacts from cyber incidents, and increased use of verified digital identity as an opt-in capability.

Implementation Framework

The Strategy is implemented through a rolling Action Plan (first published as the 2022/23 Action Plan), led by the Digital Executive Board and supported by contributing agencies and a central cross-agency delivery team. The Action Plan sequences flagship initiatives and assigns responsibilities, resources and high-level milestones. Implementation adopts an iterative 'experience, learn, adjust' model to remain adaptive in the face of rapid technological change. Agencies are expected to align internal plans and budgets with the Action Plan, and the Strategy anticipates the need for additional funding and capability over time. Delivery levers include procurement standards, regulatory alignment, targeted program funding, capability-building initiatives (skills and talent plans), and partnerships with industry and Māori organisations. The Strategy clarifies that it is a policy framework rather than technical standard-setting for specific technologies, but points to associated workstreams (for example the Digital Identity Services Trust Framework and national cyber initiatives) where implementation will require standards and operating arrangements.

Monitoring and Evaluation

Progress is measured against a set of high-level indicators aligned to Trust, Inclusion and Growth. The Action Plan sets near-term milestones and flagship initiative reporting. The Digital Executive Board had a responsibility for progress reporting and the Strategy expected a first progress report in mid-2023, with the Action Plan refreshed regularly (every 12–18 months). The Strategy notes challenges in measuring digital progress (data quality and scope) and commits to improving indicators over time. Agencies are required to provide inputs to system-level progress reporting and to monitor outcomes locally, while independent evaluation and stakeholder engagement are anticipated as part of the iterative learning approach.

Penalties, Liability, and Appeals

The Digital Strategy is a national policy instrument and does not itself create new criminal penalties or administrative fines. Compliance and enforcement for specific actions referenced by the Strategy rely on existing statutory frameworks (for example, privacy and information law enforcement under the Privacy Act 2020 and related amendments, and agency accountabilities under the Public Service Act 2020). Where the Action Plan or subsequent regulations require mandatory standards or certifications (for example cyber security standards or identity trust frameworks), enforcement and liability will be determined by those specific instruments or statutory regimes. The Strategy sets governance and accountability expectations (reporting, oversight and inter-agency coordination) and envisages dispute or appeals processes consistent with applicable legislation and administrative law.

Relationship to Other Instruments

The Strategy is explicitly designed to align with and complement other national instruments rather than supersede them. It links to New Zealand’s Cyber Security Strategy, the Digital Identity Services Trust Framework, the Digital Technologies Industry Transformation Plan, and to sectoral strategies (education, health, transport) where dependencies exist. The Strategy also references a discussion document and public engagement summary that informed its development and commits to working with existing regulatory regimes, including privacy, human rights, consumer protection, and public sector governance frameworks. Appendix Four of the Strategy lists supporting strategies and dependencies and the Action Plan identifies interfaces where cross-program coordination is required.

International Alignment

The Strategy recognises that digital issues are global in nature and signals a commitment to international cooperation, interoperability, and the adoption of ethical and rights-respecting approaches (including internationally-recognised AI ethics principles and cross-border data flows). It highlights the need for New Zealand to engage multilaterally and bilaterally (including through trade and diplomatic channels) to ensure New Zealand’s digital standards support trade, privacy protections, and cyber resilience. The Strategy calls for alignment with international best practice while reflecting Te Tiriti obligations and New Zealand’s cultural context.

Implementation Timeline

Sources and References