New Zealand - AI Strategy (2025)

New Zealand’s Strategy for Artificial Intelligence: Investing with Confidence

New Zealand

RAI-NZ-NA-NZSAIXX-2025
Adopted(Adopted)
PolicyGovernance and OversightRisk ManagementData Protection and Privacy
Export PDF

Published by the Ministry of Business, Innovation & Employment (MBIE) in July 2025, New Zealand’s Strategy for Artificial Intelligence: Investing with Confidence is a national, adoption‑focused, principles‑based roadmap to accelerate private‑sector AI uptake. The strategy emphasises enabling business investment through guidance, risk management, alignment with OECD principles, and cross‑government coordination rather than creating a new prescriptive regulatory regime.

Summary

New Zealand’s Strategy for Artificial Intelligence: Investing with Confidence (July 2025) is a national strategy published by the Ministry of Business, Innovation & Employment (MBIE) that sets out the Government’s approach to encouraging private‑sector adoption and innovation in AI. The strategy takes a deliberately uptake‑focused and light‑touch approach: its central goal is to reduce barriers and uncertainty that deter businesses — particularly SMEs — from investing in AI, while ensuring responsible deployment in line with international principles. It positions New Zealand as a pragmatic adopter of AI, leveraging strengths in agriculture, healthcare, education and niche technology sectors to promote productivity and export growth. The document reiterates commitment to the OECD AI Principles (including respect for human rights, fairness, safety, robustness, transparency and privacy), and sets out practical government actions including publication of business guidance (the voluntary 'Responsible AI guidance for businesses'), an AI ecosystem map developed with the AI Forum New Zealand, and measures to improve access to talent and investment.

Rather than creating a new standalone AI statute or imposing prescriptive obligations, the strategy focuses on: (1) clarifying how existing legal frameworks apply to AI (e.g., Privacy Act, Fair Trading Act, Commerce Act), (2) removing unintended legal or regulatory barriers to AI uptake where feasible, (3) publishing practical resources and tools for businesses and public agencies (including guidance on governance, risk management and privacy), and (4) promoting international alignment and standards. MBIE identifies barriers (skills, access to data, trust, investment uncertainty) and commits to coordinated cross‑agency action to address them, working with the AI Forum New Zealand and other stakeholders.

Key themes include: encouraging private investment by signaling stable policy settings; promoting responsible design and deployment through voluntary guidance and sectoral best practice; improving public sector adoption and demonstration of responsible AI; strengthening international engagement to attract investment and interoperability; and monitoring uptake and harms through existing regulators. The strategy does not itself establish new enforcement sanctions specific to AI but makes clear that existing regulatory regimes and regulators will continue to apply to AI‑driven conduct, and that agency guidance and standards will be used to operationalise expectations. MBIE published a PDF of the full strategy and a one‑page summary and signalled ongoing engagement and monitoring to ensure the strategy meets its objectives of unlocking economic benefits while managing risks.

Full article

Read full text ↗

Overview

New Zealand’s Strategy for Artificial Intelligence: Investing with Confidence (July 2025) sets a national approach to accelerate private‑sector AI adoption and innovation by reducing barriers to investment while safeguarding rights and public trust. The strategy is published by the Ministry of Business, Innovation & Employment (MBIE) and is explicitly adoption‑focused: it emphasises enabling businesses to use and develop AI responsibly, rather than imposing a new prescriptive statute. The document signals alignment with international norms (notably the OECD AI Principles), references sectoral opportunities (agriculture, healthcare, education, fintech), and releases practical resources such as the main strategy PDF and a one‑page summary. The web and PDF versions, and supporting business guidance, are available via MBIE’s digital policy pages: New Zealand's AI Strategy: Investing with confidence (MBIE) and the downloadable strategy PDF (New Zealand’s Strategy for Artificial Intelligence: Investing with confidence [PDF]).

Definitions

The strategy uses OECD‑aligned, practical definitions. "Artificial Intelligence (AI)" is described as machine‑based systems that infer from inputs and generate outputs for explicit or implicit objectives; "Generative AI" is defined as systems that create new content (text, images, audio, code) based on patterns in training data. The strategy emphasises functional descriptions — autonomy, adaptiveness, and potential for emergent behaviours — rather than narrow technical taxonomies. It stresses that risk and governance should be proportionate to system capability and real‑world impact, and that obligations are shaped by context, data use, and the scale of deployment.

Governance and Institutional Framework

MBIE leads the strategy’s publication and cross‑government coordination, with complementary roles for other agencies. The Government Chief Digital Officer and the Public Service AI Framework support safe public sector uptake and interoperability. Privacy oversight remains with the Office of the Privacy Commissioner; consumer protection and competition concerns are to be addressed through the Commerce Commission and related regulators. MBIE commits to working with industry bodies (including the AI Forum New Zealand) and research institutions to maintain an AI ecosystem map and coordinate capability building. The strategy recommends governance practices for organisations (board oversight, AI risk registers, change controls) and encourages voluntary adherence to principles such as transparency, explainability, and privacy by design. MBIE also points to existing instruments and guidance (for example, the MBIE Responsible AI guidance for businesses and the OPC’s privacy expectations) as practical tools for institutional compliance.

Key Focus Areas

The strategy’s principal focus areas are designed to unlock private investment: (1) Reducing regulatory uncertainty — clarifying how current laws apply to AI and removing unintended legal barriers where possible; (2) Business guidance and capability — publishing voluntary, practical resources for SMEs and large firms (risk management templates, procurement guidance, case studies); (3) Data access and interoperability — improving lawful, privacy‑respecting access to data for innovation while protecting individuals and communities; (4) Talent and investment — measures to attract international investment and skilled workers; (5) Public sector demonstration — driving adoption in government to create demonstration effects; (6) International engagement and standards — aligning with OECD and global fora to reduce friction for exporters and investors; and (7) Monitoring and risk management — using existing regulators and voluntary reporting to detect harms and iterate policy. These areas are operationalised through coordinated workstreams rather than new standalone regulations.

Implementation Framework

Implementation is described as a mix of voluntary guidance, targeted policy fixes, cross‑agency coordination, and stakeholder engagement. MBIE publishes toolkits (including the Responsible AI guidance for businesses) and an AI ecosystem map produced with the AI Forum New Zealand to help firms find partners, skills and investors. The strategy outlines that MBIE will identify specific legal settings that unintentionally restrict AI adoption and propose clarifications or remedies, using existing consultation mechanisms. Public sector rollout is supported by the Government Chief Digital Officer and the Public Service AI Framework to ensure consistent approaches across agencies. Where sectoral risks are material (e.g., health, finance), MBIE will work with relevant regulators to issue sector‑specific guidance or adapt existing regulatory tools to AI contexts.

Monitoring and Evaluation

MBIE commits to ongoing monitoring of AI uptake, harm signals, and economic impacts using metrics such as private investment levels, SME adoption rates, demonstrable productivity gains, and reports of consumer or privacy harm. The strategy proposes periodic reviews and stakeholder engagement cycles to update guidance and address emergent issues. Existing regulators (Privacy Commissioner, Commerce Commission, sectoral agencies) are expected to report activity and findings relevant to AI. MBIE also signals willingness to iterate the approach if evidence shows material harms or market failures, and to escalate to regulatory interventions only if necessary.

Penalties, Liability, and Appeals

The strategy itself does not create new penalty regimes. It clarifies that existing legal frameworks — including the Privacy Act, Fair Trading Act, Commerce Act, and sectoral legislation — continue to apply to behaviours and outputs involving AI. Enforcement action and penalties for unlawful conduct will continue to be those available under current statutes and administered by the respective regulators. MBIE’s approach is to provide clarity and guidance rather than novel sanctions, but it notes that where harms occur, existing enforcement channels (investigations, fines, civil remedies, criminal penalties where applicable) will be used. The strategy encourages businesses to maintain documentation and governance to reduce liability exposure and to use dispute and appeal mechanisms that existing statutes provide.

Relationship to Other Instruments

The strategy is explicitly complementary to existing national instruments: New Zealand’s Privacy Act regime and OPC guidance on AI and the Information Privacy Principles; competition and consumer protection laws enforced by the Commerce Commission; sectoral regulatory frameworks (health, financial services) and the Public Service AI Framework for government agencies. MBIE positions the strategy as a coordinating layer that references existing obligations and guidance rather than superseding them. It also cross‑references international standards and standardisation work (for example, ISO/IEC standards) and private sector codes of practice like the Algorithm Charter.

International Alignment

International alignment is central: the strategy affirms adherence to the OECD AI Principles and commits to active engagement in global fora to influence norms. It emphasises interoperability for exporters and foreign investors, and signals New Zealand’s intent to align policy and technical standards to reduce cross‑border friction. MBIE highlights collaboration with partners and standards bodies to ensure New Zealand’s approach remains compatible with major markets and to support mutual recognition of conformity where appropriate.

Implementation Timeline

MilestoneTarget Date
Strategy published (MBIE)2025‑07‑08
Responsible AI guidance published (toolkits and one‑pager)2025‑07 (concurrent)
Cross‑agency implementation plan agreed2025‑Q4
Initial monitoring report on uptake and harms2026‑Mid
Public update and revision cycleAnnually (first in 2026)

Sources and References

SourceType
New Zealand's AI Strategy: Investing with confidence (MBIE web page)Primary Source
New Zealand’s Strategy for Artificial Intelligence: Investing with confidence [PDF]Primary Source
Responsible Artificial Intelligence guidance for businesses (MBIE)Primary Source
Office of the Privacy Commissioner – AI & IPPs guidancePrimary Source

Requirements for a company

What an organisation has to do under New Zealand - AI Strategy (2025), at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.

Must do

6
  • Conduct a Privacy Impact Assessment for AI systems.Organisations using or developing AI that processes personal data.
  • Ensure consumer communications related to AI are accurate and not misleading.Organisations using AI that interacts with consumers.
  • Map AI use cases and their risk profiles.Organisations using or developing AI.
  • Establish board oversight and maintain documentation for AI systems.Organisations using or developing AI.
  • Adopt cybersecurity best practices for AI models and data.Organisations using or developing AI.
  • Maintain documentation and governance practices to reduce liability exposure.Organisations using or developing AI.

Must not do

0

Nothing in this category.

Should do

2
  • Voluntarily adhere to principles such as transparency, explainability, and privacy by design.Organisations using or developing AI.
  • Use existing guidance from MBIE and the Office of the Privacy Commissioner.Organisations using or developing AI.

Should not do

0

Nothing in this category.

Who must do what

The obligations under New Zealand - AI Strategy (2025), most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Organisations using or developing AI that processes personal data.Conduct a Privacy Impact Assessment for AI systems.
Conduct Privacy Impact Assessment
Before deployment or significant changeCompliance ChecklistCritical
2Organisations using AI that interacts with consumers.Ensure consumer communications related to AI are accurate and not misleading.
Ensure consumer communications are accurate
Before communicating with consumersCompliance ChecklistCritical
3Organisations using or developing AI.Map AI use cases and their risk profiles.
Map AI use cases and risk profile
Compliance ChecklistImportant
4Organisations using or developing AI.Establish board oversight and maintain documentation for AI systems.
The strategy recommends governance practices for organisations (board oversight, AI risk registers, change controls)
Governance and Institutional FrameworkImportant
5Organisations using or developing AI.Adopt cybersecurity best practices for AI models and data.
Adopt cybersecurity best practice for models & data
Compliance ChecklistImportant
6Organisations using or developing AI.Maintain documentation and governance practices to reduce liability exposure.
The strategy encourages businesses to maintain documentation and governance to reduce liability exposure
Penalties, Liability, and AppealsImportant
7Organisations using or developing AI.Voluntarily adhere to principles such as transparency, explainability, and privacy by design.
encourages voluntary adherence to principles such as transparency, explainability, and privacy by design.
Governance and Institutional FrameworkRecommended
8Organisations using or developing AI.Use existing guidance from MBIE and the Office of the Privacy Commissioner.
MBIE also points to existing instruments and guidance (...) as practical tools for institutional compliance.
Governance and Institutional FrameworkRecommended

© Regulations.AI · updated on 13-Jun-2026