Consumer Rights

Business briefs

Launch of the Business Investor Visa

The government has introduced the Business Investor Visa (BIV), a new immigration pathway aimed at attracting experienced international investors to strengthen New Zealand’s economy. The launch of the BIV follows the closure of the Entrepreneur Work Visa and represents a significant shift toward sustained investment in established New Zealand businesses.

The BIV offers two residency pathways:

  1. Work-to-residency (3 years) – minimum investment threshold of $1 million, or
  2. Fast-track residency (12 months) – minimum investment threshold of $2 million.

Investments must be directed into an existing, actively operated New Zealand business. Other key requirements include demonstrated business experience by the investor, investment in a business that employs at least five full-time staff, and compliance with approved and qualifying business categories.

For New Zealand business owners, the BIV presents an opportunity to attract new capital, expand operations and generate employment that, in turn, will promote long-term economic growth.

Responsible AI usage

AI is advancing and reshaping how businesses operate. However, if you adopt AI without a clear strategy it may expose your business to serious risk – including, without limitation, bias, errors, privacy breaches and cybersecurity threats.

To help businesses navigate this, the Ministry of business, innovation and Employment has released Responsible AI Guidance for Businesses, The Guidance outlines practical steps to ensure AI use is responsible and aligns with your commercial goals, legal obligations and ethical standards.

Key recommendations include:

  • Defining your purpose for using AI and starting with low-risk projects
  • Maintaining human oversight to prevent errors and unintended consequences
  • Reviewing governance, risk management and compliance processes
  • Choosing trusted AI providers and implementing strong data protection methods, and
  • Training staff to understand AI’s capabilities and limitations.

For a more comprehensive overview, we encourage you to read the Guidance and consider seeking legal advice to protect your business as you implement AI. While AI can deliver significant benefits, successful implementation requires a cautious and comprehensive approach.

HelloFresh and the Fair Trading Act 1986

In the Winter 2025 edition of Commercial eSpeaking, we reported on the Commerce Commission’s allegations against HelloFresh for misleading conduct under the Fair Trading Act 1986 (FTA).

The commission’s prosecution focused on an 18-month cold call campaign, during which former customers of HelloFresh were offered discount vouchers without a clear explanation that accepting those offers would result in subscriptions being reactivated, consequently triggering customer account charges.

Recently, in the Auckland District Court, it was found that the way the discount vouchers were presented created a misleading overall impression for former customers. HelloFresh was fined $845,000 as a result.

The above decision underscores the serious consequences of breaching the FTA. This is particularly relevant now, as the government has proposed to substantially increase the penalties for non-compliance. At present, the maximum penalties for misleading and deceptive conduct under the FTA are capped at $200,000 for individuals and $600,000 for businesses. The proposal to increase these limits will allow penalties to reach the greater of:

  • $1 million for individuals
  • $5 million for businesses
  • Three times the value of any commercial gain or loss avoided, or
  • The value of the transaction(s) involved.

Although a new civil regime will also apply for most breaches, the most serious or deliberate conduct will remain a criminal offence. These changes are expected to take effect by late 2026.

This announcement marks a significant increase in potential liability, emphasising the need for businesses to ensure advertising, pricing and promotional terms are accurate and transparent. Disclaimers buried in fine print may not be enough to correct misleading impressions. With penalties expected to become significantly higher, compliance with the FTA is essential to avoid financial and reputational consequences.

 

DISCLAIMER: All the information published in Commercial eSpeaking is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this newsletter. Views expressed are those of individual authors, and do not necessarily reflect the view of Edmonds Judd. Articles appearing in Commercial eSpeaking may be reproduced with prior approval from the editor and credit given to the source.
Copyright, NZ LAW Limited, 2026.     Editor: Adrienne Olsen.       E-mail: [email protected]       Ph: 029 286 3650


Consumer Data Right

The age of open banking and beyond

Every day, banks and electricity providers collect vast amounts of data about us. Although this data serves these businesses exceptionally well, its utility extends far beyond their immediate uses. Yet, our ability to share and integrate this data with third parties has been limited – until now.

 

The Consumer Data Right (CDR) was established on 31 March 2025 under the Consumer and Product Data Act 2025. It is a framework for consumers to securely and efficiently access and share their data with trusted third parties. The CDR aims to bolster an individual’s control over their data as well as to increase competition and innovation across various industries.

 

Sector-by-sector approach

Not all sectors will be subject to the CDR. Instead, sectors will be designated individually. Banking is scheduled to become the first designated sector, with regulations for the four largest banks (ANZ, Westpac, BNZ and ASB) expected to come into effect by the end of 2025. Discussions are also underway to expand the CDR to the electricity, telecommunications and insurance sectors.

How it works

Once sector-specific regulations are in place, individuals may request the transfer of their data to accredited third parties under this framework. It even allows these accredited third parties to make such requests on behalf of the customer (with their authorisation). Businesses that come under this scheme are obligated to fulfil these requests. This includes providing access to some of their own product-related data and performing certain requested actions, such as closing accounts.

 

Preparing for accreditation

Accredited third parties must meet strict security requirements set by the Ministry of Business, Innovation, and Employment (MBIE). MBIE’s accreditation process is expected to include information security standards and data storage protocols. Businesses seeking accreditation as third parties within these sectors should begin assessing their security policies and data-handling practices while we wait for further direction.

 

Impact on businesses and consumers

Historically, access to this data has been in formats and mediums that are not portable. By ensuring that accredited third parties can directly obtain data that is readily integrated with their own services, it is hoped that the CDR will create a seamless experience for us – the customer.

 

With respect to the banking sector, the CDR could streamline moving banks, allow mortgage brokers to find better lending terms, and foster new and innovative services around budgeting or financial planning.

 

We will have to wait for the roll-out of these sector-specific regulations to get the full details as to how the CDR will work in practice. As regulations begin to roll out, businesses and consumers alike will need to stay informed about their rights and responsibilities under this transformative legislation.

 

DISCLAIMER: All the information published in Property Speaking is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this newsletter. Views expressed are those of individual authors, and do not necessarily reflect the view of Edmonds Judd. Articles appearing in Property Speaking may be reproduced with prior approval from the editor and credit given to the source.
Copyright, NZ LAW Limited, 2022.     Editor: Adrienne Olsen.       E-mail: [email protected].       Ph: 029 286 3650