The Digital Strategy for Aotearoa

Overview

The Digital Strategy for Aotearoa (September 2022) sets the national ambition that "Aotearoa New Zealand’s people, communities, economy, and environment are flourishing and prosperous in the digital era." It is framed around three themes—Mahi Tika (Trust), Mahi Tahi (Inclusion) and Mahi Ake (Growth)—and establishes goals, high-level measures and a first Action Plan (2022/23). The Strategy was developed by a cross-agency team (MBIE, DIA, DPMC, Stats NZ and the National Cyber Security Centre) with public engagement in late 2021 and is supported by the Digital Executive Board to coordinate implementation. For the full text see Digital Strategy for Aotearoa (PDF) and the web summary at digital.govt.nz.

Definitions

The Strategy defines 'digital' broadly to include computing hardware and software, the supporting infrastructure, and the data integral to those systems. It treats 'digital' as socio-technical systems—covering rules, policies, design, data provenance, cultural frameworks (including Te ao Māori perspectives) and the social and environmental impacts that result from the use of technologies. Key terms used in implementation materials include 'Digital Executive Board' (the cross-agency governance body), 'Action Plan' (the rolling implementation roadmap), 'flagship initiatives' (prioritised projects) and 'measures' (high-level indicators under each theme).

Governance and Institutional Framework

Implementation is led through a whole-of-government architecture anchored by the Digital Executive Board, hosted by the Department of Internal Affairs and established under Public Service institutional arrangements. The Board provides system-level oversight, prioritisation and coordination of cross-agency activity and reports on progress through Ministerial channels. The Strategy anticipates that agencies will use procurement, funding, policy, and regulation levers to deliver on priorities, and that the Action Plan will be refreshed every 12–18 months to respond to emerging risks and opportunities. The Strategy also names responsible contributor agencies and stresses the Crown’s obligation to Te Tiriti o Waitangi / the Treaty of Waitangi; Māori data governance is an explicit institutional priority. Relevant statutory frameworks that underpin governance include the Public Service Act 2020 and privacy and information laws, which remain key delivery levers.

Key Focus Areas

The Strategy’s three themes structure priorities: (1) Mahi Tika — Trust: online safety, ethical and culturally-appropriate data use, resilience of digital infrastructure and alignment with New Zealand’s cyber security workstreams; (2) Mahi Tahi — Inclusion: universal access, affordability, skills and capability development, accessibility, and targeted support to close digital divides (including focused initiatives for rural communities and tāngata whenua); and (3) Mahi Ake — Growth: enabling business innovation, exporting digital goods and services, stimulating a diverse tech talent pipeline, and supporting sustainable, low-carbon technology development. Flagship initiatives listed in the Action Plan include Digital Boost, Māori Data Governance, Digital Identity Services Trust Framework, Data as a tool for decision-making, and the Digital Technologies Industry Transformation Plan. These focus areas connect to measurable outcomes—e.g., improved access, reduced economic impacts from cyber incidents, and increased use of verified digital identity as an opt-in capability.

Implementation Framework

The Strategy is implemented through a rolling Action Plan (first published as the 2022/23 Action Plan), led by the Digital Executive Board and supported by contributing agencies and a central cross-agency delivery team. The Action Plan sequences flagship initiatives and assigns responsibilities, resources and high-level milestones. Implementation adopts an iterative 'experience, learn, adjust' model to remain adaptive in the face of rapid technological change. Agencies are expected to align internal plans and budgets with the Action Plan, and the Strategy anticipates the need for additional funding and capability over time. Delivery levers include procurement standards, regulatory alignment, targeted program funding, capability-building initiatives (skills and talent plans), and partnerships with industry and Māori organisations. The Strategy clarifies that it is a policy framework rather than technical standard-setting for specific technologies, but points to associated workstreams (for example the Digital Identity Services Trust Framework and national cyber initiatives) where implementation will require standards and operating arrangements.

Monitoring and Evaluation

Progress is measured against a set of high-level indicators aligned to Trust, Inclusion and Growth. The Action Plan sets near-term milestones and flagship initiative reporting. The Digital Executive Board had a responsibility for progress reporting and the Strategy expected a first progress report in mid-2023, with the Action Plan refreshed regularly (every 12–18 months). The Strategy notes challenges in measuring digital progress (data quality and scope) and commits to improving indicators over time. Agencies are required to provide inputs to system-level progress reporting and to monitor outcomes locally, while independent evaluation and stakeholder engagement are anticipated as part of the iterative learning approach.

Penalties, Liability, and Appeals

The Digital Strategy is a national policy instrument and does not itself create new criminal penalties or administrative fines. Compliance and enforcement for specific actions referenced by the Strategy rely on existing statutory frameworks (for example, privacy and information law enforcement under the Privacy Act 2020 and related amendments, and agency accountabilities under the Public Service Act 2020). Where the Action Plan or subsequent regulations require mandatory standards or certifications (for example cyber security standards or identity trust frameworks), enforcement and liability will be determined by those specific instruments or statutory regimes. The Strategy sets governance and accountability expectations (reporting, oversight and inter-agency coordination) and envisages dispute or appeals processes consistent with applicable legislation and administrative law.

Relationship to Other Instruments

The Strategy is explicitly designed to align with and complement other national instruments rather than supersede them. It links to New Zealand’s Cyber Security Strategy, the Digital Identity Services Trust Framework, the Digital Technologies Industry Transformation Plan, and to sectoral strategies (education, health, transport) where dependencies exist. The Strategy also references a discussion document and public engagement summary that informed its development and commits to working with existing regulatory regimes, including privacy, human rights, consumer protection, and public sector governance frameworks. Appendix Four of the Strategy lists supporting strategies and dependencies and the Action Plan identifies interfaces where cross-program coordination is required.

International Alignment

The Strategy recognises that digital issues are global in nature and signals a commitment to international cooperation, interoperability, and the adoption of ethical and rights-respecting approaches (including internationally-recognised AI ethics principles and cross-border data flows). It highlights the need for New Zealand to engage multilaterally and bilaterally (including through trade and diplomatic channels) to ensure New Zealand’s digital standards support trade, privacy protections, and cyber resilience. The Strategy calls for alignment with international best practice while reflecting Te Tiriti obligations and New Zealand’s cultural context.

Implementation Timeline

Milestone	Target Date	Notes
Strategy published	2022-09-14	Official publication of the Digital Strategy for Aotearoa (PDF and web page).
2022/23 Action Plan published	2022-09-14	First Action Plan setting flagship initiatives and responsibilities.
First progress report (target)	2023-06-30	Target set in Action Plan for mid-2023 reporting.
Action Plan refresh cycle	Every 12-18 months	Rolling refresh to respond to changing priorities.
Digital Executive Board remit reset (Cabinet decision)	2023-06	Board remit reset by Cabinet; new remit effective Sep 2023.

Compliance Checklist

Item	Who	Evidence
Align agency plans with Action Plan	Government agencies	Agency plans, budget allocations, and progress reports
Participate in Digital Executive Board reporting	Lead agencies (DIA/MBIE/Stats NZ)	Input to system-level reports and dashboards
Adopt Māori data governance approaches	All agencies and partners	Policies, partnership agreements and governance arrangements
Implement flagship initiatives (e.g., Digital Identity pilot)	Responsible programme leads	Project milestones, procurement records and evaluations
Report on measures for Trust, Inclusion, Growth	Digital Executive Board & contributing agencies	Periodic progress reports and published indicators

Sources and References

Source	Type
The Digital Strategy for Aotearoa (English PDF)	Primary Source
The Digital Strategy for Aotearoa (web summary)	Primary Source
Action Plan for the Digital Strategy for Aotearoa (2022/23)	Primary Source
Digital Executive Board (DIA)	Primary Source
Public Service Act 2020	Primary Source
Privacy Act 2020	Primary Source

The Digital Strategy for Aotearoa outlines New Zealand's national vision and framework to help its people, communities, economy, and environment thrive in the digital age, primarily guiding government agencies and their partners.

This policy, effective September 14, 2022, sets a multi-year roadmap built around three core themes: Trust (Mahi Tika), Inclusion (Mahi Tahi), and Growth (Mahi Ake). While a government policy, its implementation involves all New Zealand government agencies, their partners, and ultimately aims to benefit all New Zealanders, businesses, and communities.

Key expectations for government agencies include: - Aligning internal plans and budgets with the Strategy's rolling Action Plan, which is refreshed every 12-18 months. - Adopting Māori data governance approaches in their work. - Contributing to and reporting on progress against the Strategy's goals for Trust, Inclusion, and Growth. - Implementing specific "flagship initiatives" such as digital identity services, cyber security alignment, and skills development programs.

The Strategy itself doesn't create new criminal penalties or administrative fines. Instead, compliance relies on existing laws like the Privacy Act 2020 and the Public Service Act 2020. If specific initiatives lead to new mandatory standards or regulations, their enforcement will be defined by those separate instruments.

A practical point for product managers and founders is that this Strategy is a high-level policy framework, not a detailed set of technical standards for specific technologies. While it guides government action, businesses should look to associated workstreams, like the Digital Identity Services Trust Framework, for specific technical requirements or standards that might impact their products or services.

New Zealand - Digital Strategy (2022)

Summary

Plain English