New Zealand Responsible AI Guidance for Business
Issued by
New Zealand Ministry of Business, Innovation and Employment (MBIE)
- September 30, 2026 · Correction — Corrected the issuer (MBIE), date (8 July 2025), and status (voluntary resource under a light-touch strategy relying on existing law) (fact-check finding). (Cody Maxwell)
- October 1, 2026 · Correction — Moved to the new New Zealand jurisdiction; it was filed under Australia by mistake. (Cody Maxwell)
- October 1, 2026 · Correction — Rewrote the practical steps, newsletter hook, search description, and audience fields to match the entry's corrected content. (Cody Maxwell)
New Zealand's MBIE released voluntary Responsible AI Guidance for Businesses on 8 July 2025, alongside the country's first AI Strategy. It helps businesses, including sole traders and non-profits, use and develop AI in a trustworthy way under existing New Zealand law.
Applies To
Overview
The New Zealand Responsible AI Guidance for Business offers a structured approach to AI governance intended for commercial entities operating within New Zealand. It addresses the full lifecycle of AI use, from procurement and development through to deployment and ongoing monitoring, with an emphasis on risk identification and mitigation. Key provisions include guidance on establishing internal governance structures, conducting risk assessments, ensuring transparency with affected parties, and maintaining human oversight of automated decisions. It is a voluntary resource released on 8 July 2025 with the AI Strategy, which takes a light-touch approach relying on existing law rather than new AI legislation. Following it does not remove the need to comply with existing New Zealand law. It aligns with international responsible AI principles, including the OECD (Organisation for Economic Co-operation and Development) AI Principles, and is intended to support businesses in preparing for a more regulated environment. Enterprises are encouraged to treat the guidance as a baseline standard for internal AI governance programs.
Key Requirements
- •Establish documented AI governance structures with clear accountability and oversight roles
- •Conduct and record risk assessments for AI systems prior to deployment, with particular attention to high-impact use cases
- •Implement transparency measures so that individuals affected by AI-driven decisions are adequately informed
- •Maintain human oversight mechanisms for consequential automated decisions, with defined escalation and review procedures
- •Develop and apply processes for ongoing monitoring of AI system performance, bias, and unintended outcomes
- •Engage with affected stakeholders, including employees and customers, when deploying AI in ways that materially affect them
What Your Organization Must Do
- →Adopt the voluntary guidance as a baseline for your internal AI governance program.
- →Document who is accountable for AI oversight, and record their roles and decision rights.
- →Run and record risk assessments before deploying AI, prioritising hiring and credit use cases.
- →Tell affected customers and employees when AI drives decisions about them.
- →Keep human review and escalation steps for consequential automated decisions.
- →Confirm separately that AI use still meets the Privacy Act 2020 and consumer protection law.
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- Is the New Zealand Responsible AI Guidance for Business legally binding?
- No, it is a voluntary resource. New Zealand's AI Strategy relies on existing law rather than new AI-specific rules, so existing duties such as privacy and consumer law still apply.
- Which businesses does the NZ Responsible AI Guidance apply to?
- It is written for businesses of all kinds, including sole traders, non-profits, and individual professionals, that use or develop AI in New Zealand.
- What are the penalties for non-compliance with the NZ Responsible AI Guidance?
- None, because the guidance is voluntary. Existing laws, such as the Privacy Act 2020 and consumer protection law, still apply to AI use.
- How does the NZ Responsible AI Guidance align with the OECD AI Principles?
- The guidance is explicitly designed to align with the OECD AI Principles, covering comparable themes including transparency, accountability, human oversight, and risk management. Businesses already compliant with OECD-aligned frameworks should find significant overlap with the NZ requirements.
- What documentation do businesses need to maintain under the NZ Responsible AI Guidance?
- Businesses should maintain records of AI governance structures, pre-deployment risk assessments, transparency disclosures, human oversight procedures, ongoing monitoring results, and stakeholder engagement outcomes. These records serve as evidence of due diligence if regulatory scrutiny arises.
- Does the NZ Responsible AI Guidance impose specific requirements for high-risk AI use cases like hiring or credit decisions?
- Yes. The guidance specifically flags high-impact use cases such as credit decisions and hiring tools as priority areas for pre-deployment risk assessments. Human oversight mechanisms and transparency disclosures are also emphasized for any consequential automated decisions affecting individuals.