PrivacyLaw

Business briefs

Commerce Commission – unconscionable conduct

For the first time, the Commerce Commission has filed proceedings under the prohibition on unconscionable conduct in the Fair Trading Act 1986. This development suggests that active enforcement in this area is underway.

Unconscionable conduct is business behaviour that falls well below accepted New Zealand standards and goes beyond ordinary commercial practice to conduct that is clearly unfair and unreasonable. This is one of several areas the Commission has identified as an enforcement priority.

The Commission has taken action against Brand Developers Limited (trading as The TV Shop) and Tech Vault Enterprises Limited (trading as HouseSmile), alleging both used high-pressure sales tactics on vulnerable consumers, including people with cognitive impairments or serious illnesses. The Commission considers this conduct a clear departure from acceptable business standards.

Businesses found in breach of the prohibition risk a fine of up to $600,000 and individuals may be liable for a fine of up to $200,000. Courts may also order businesses to compensate affected customers.

This action serves as a timely reminder to all businesses to ensure their sales practices are up to scratch, especially when they are dealing with vulnerable customers.

 

Overseas Investment Act 2005 reform

The Overseas Investment (National Interest Test and Other Matters) Amendment Act came into force on 6 March 2026, delivering a significant overhaul of New Zealand’s foreign investment framework.

The reforms are designed to make it easier and faster for overseas investors to invest in New Zealand, while ensuring the government retains the ability to scrutinise transactions that could affect New Zealand’s national interests.

Part of the reform involved streamlining the overseas investment application process. Previously, overseas investment applications had to satisfy several separate tests. A single national interest test now applies to transactions involving significant business assets and sensitive land, other than farmland, fishing quota and residential land (for which the existing consent pathways remain). Applications are assessed through a three-stage process:

  1. Risk identification: The Overseas Investment Office (OIO) assesses the application for any national interest concerns. If none are identified, consent is granted. The statutory timeframe for decisions under this stage is up to 15 working days.
  2. Risk assessment: If concerns are identified, a more detailed assessment follows. Consent can still be granted at this stage, with or without conditions. The statutory timeframe for review under this stage increases by 55 working days.
  3. Ministerial decision: In cases where the transaction may be contrary to New Zealand’s national interest, the matter may be referred to the Minister of Finance who can decline consent. There is no fixed statutory timeframe for a ministerial decision.

For business owners looking to attract overseas investment or to sell to a foreign buyer, this framework should make the consent process faster and more straightforward. That said, the regime still applies and any agreement must be specifically conditional on OIO consent being obtained before the deal proceeds.

 

New obligations for businesses collecting personal information from third parties

On 1 May 2026, Information Privacy Principle 3A (IPP3A) came into effect, expanding the notification requirement under the Privacy Act 2020 to cover indirect collection of personal information.

Previously, businesses had no obligation to notify individuals when collecting their personal information from a third party. IPP3A has changed that.

What your business must disclose: From now on, when your business collects personal information indirectly, you must take reasonable steps, as soon as is reasonably practicable, to make the individual aware of the:

  • Fact that their information has been collected
  • Purpose of the collection
  • Intended recipients of the information
  • Name and address of the agency, or agencies, collecting and holding the information
  • If applicable, which law authorises or requires the collection, and
  • Rights of the individual to access and correct their information.

Exceptions: IPP3A does not require notification in all circumstances. Exceptions include, but are not limited to, where:

  • The individual has already been notified
  • The information is publicly available
  • Compliance is not reasonably practicable, and/or
  • It is necessary for law enforcement or court proceedings.

Please note the above is to be treated as a guide rather than an exhaustive list. We recommend seeking tailored legal advice before relying on any exception.

Next steps: If you haven’t already, you may want to consider building notification into your existing policies and this should be communicated clearly to individuals. The Office of the Privacy Commissioner has released guidance on IPP3A which provides a helpful starting point for understanding your obligations. Non-compliance may result in a complaint to the Privacy Commissioner, which may lead to a formal investigation and have potentially significant consequences for your business, so it is important you take steps now to ensure your processes are up to date.

For more detailed information about IPP3A together with examples of how it works, click here. If you have any questions about how IPP3A applies specifically to your organisation, please feel free to contact us.

 

Employment Relations Amendment Act 2026 – key changes

The Employment Relations Amendment Act 2026 came into force on 21 February 2026, introducing some significant changes to the New Zealand employment law framework. Some of the key changes of which businesses should be aware are listed below.

Independent contractors: The Act introduces a new gateway test to determine whether a worker is an employee or a contractor. To qualify as a ‘specified contractor,’ five criteria must be met that cover matters such as having a written agreement, freedom to work for others, flexible hours, the ability to decline work and having had a reasonable opportunity to seek legal advice. There is more information about the test here.

Personal grievances: Where an employee’s conduct amounts to serious misconduct and has contributed to the situation giving rise to the personal grievance, no remedies will be awarded. Where the conduct falls short of serious misconduct but still contributed to the grievance, remedies may be reduced by up to 100%.

High-income earner: Employees earning $200,000+ per year in total remuneration will no longer be able to bring a personal grievance or file proceedings in relation to an unjustified dismissal. A 12-month transitional protection applies to those already in roles when the legislation came into force.

Collective agreements: The requirement to apply collective agreement terms to new employees during their first 30 days, and the automatic sharing of new employee information with the union, will no longer apply.

Justification test: The section 103A justification test has been amended to take into account whether an employee obstructed the employer’s process. Significant procedural failures will no longer render a dismissal unjustifiable where the employee was not actually treated unfairly.

If you would like to discuss any aspect of how this new legislation affects your business, please don’t hesitate to contact us.

 

 

DISCLAIMER: All the information published in Commercial eSpeaking is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this newsletter. Views expressed are those of individual authors, and do not necessarily reflect the view of Edmonds Judd. Articles appearing in Commercial eSpeaking may be reproduced with prior approval from the editor and credit given to the source.
Content Copyright © NZ LAW Limited, 2026.    Editor: Adrienne Olsen.       E-mail: [email protected]      Ph: 029 286 3650

 


Cleared for take-off

Using your drone the right way

Over the past decade, drones have gone from niche gadgets to everyday tools. Drones help farmers to check stock, let filmmakers capture sweeping aerial. shots and give hobbyists a fun way to explore the skies. In New Zealand, drones are part of a fast-growing aviation sector: with that growth comes a clear need for sensible rules to keep people, property and other aircraft safe.

Whether you’re a teenager flying a drone in the backyard or a business experimenting with new technology, knowing the rules helps everyone share the skies safely.

New Zealand has a well-developed structure for drone regulation overseen by the Civil Aviation Authority (CAA). In this article, we explain the Civil Aviation Rules that govern drone use in New Zealand.

 

CAA Rules

Civil Aviation Rules Part 101 sets out the provisions that must be adhered to when piloting a drone that weighs under 25kg. These are the default rules for everyday recreational and simple commercial use of drones. Any drone that weighs more than 25kg requires certification from the CAA in accordance with Part 102 of the CAA Rules. Most commercial drones, however, weigh less than 25kg.

 

When and where can you fly a drone?

It is important to be familiar with the Rules before flying your drone. A drone is considered a remotely piloted aircraft, so it can be a hazard to people, property and other aircraft. Under Part 101 of the CAA Rules, drone pilots must:
• Fly below 120 metres (400 feet)
• Always ensure the drone is within their line of sight
• Fly only during daylight hours and in good weather
• Stay at least four km away from airports and aerodromes (unless specific conditions are met), and
• Not fly over homes without the property owner’s consent.

 

Privacy issues

Drone rules aren’t just about aircraft safety; they’re also about protecting people on the ground. The requirement to get consent before flying over people or private property helps reduce anxiety and avoid misunderstandings. In practice, this means:
• Asking before flying over someone’s property
• Being mindful when operating near crowds, and
• Avoiding capturing photos or videos when people reasonably expect privacy.

Some public areas, such as national parks, require separate permits from the Department of Conservation.

 

What can you do about drones over your property?

No, you cannot shoot down a drone flying over your property! This would open you up to prosecution under the Summary Offences Act 1981, the Crimes Act 1961 and the Arms Act 1983. Any complaints about drones intruding over private property without consent or in breach of the CAA Rules should be addressed to the Privacy Commissioner or the CAA.

 

Penalties

As drones are legally treated as aircraft in New Zealand, unsafe flying isn’t just ‘messing around.’ Breaches of the Civil Aviation Act 2023 and the Civil Aviation Rules carry significant penalties. Under the CAA Rules, fines can vary, usually ranging from around $500 for minor breaches, such as flying too close to an airport, and up to $10,000 for serious violations such as endangering or tampering with an aircraft. For companies that breach drone rules, the maximum fines are higher – up to $30,000.

The Civil Aviation Act 2023 which came into force on 5 April 2025 states that the CAA and the Police have the power to require a drone operator to provide any information that may help identify the pilot in command. Refusing to provide that information is itself an offence.

 

Understand the Rules

Drones open up exciting possibilities, but they also turn every operator, no matter how young, into a participant in New Zealand’s aviation system. By understanding the Rules, keeping safety in mind and showing respect for other’s privacy, we can ensure drones remain a positive and innovative part of Aotearoa’s future.

 

 

DISCLAIMER: All the information published in Fineprint is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this newsletter. Views expressed are those of individual authors, and do not necessarily reflect the view of Edmonds Judd. Articles appearing in Fineprint may be reproduced with prior approval from the editor and credit given to the source.
Copyright, NZ LAW Limited, 2025.     Editor: Adrienne Olsen.       E-mail: [email protected]     Ph: 029 286 3650 


Business briefs

Commerce Commission – Misleading and deceptive conduct – Noel Leeming

The Commerce Commission has filed criminal charges against electronics retailer Noel Leeming, alleging that its well-known ‘Price Promise’ misled consumers.

 

The retailer had promoted the promise as a guarantee that customers would always receive a match with a competitor’s price. In practice, however, the exclusions and restrictions in the terms and conditions significantly limited the application of this and many shoppers were unable to rely on the promise as advertised.

 

The Commission has alleged multiple breaches of the Fair Trading Act 1986 that prohibits businesses from engaging in misleading and deceptive conduct. The Commission emphasised the importance of large retailers being clear and honest in their advertising. It has previously warned businesses that disclaimers buried in fine print may not be enough to correct misleading impressions.

 

This investigation serves as a reminder to all New Zealand businesses of the importance of ensuring promotional promises are accurate and not undermined by hidden conditions. For consumers, it highlights the need to be cautious of marketing claims that may not tell the full story.

 

Online Casino Gambling Bill

The government has introduced the Online Casino Gambling Bill. This is a significant reform in the gambling sector that would allow online casino operators to be licensed and regulated in New Zealand for the first time.

 

Up to 15 operator licences will be allocated by auction to businesses seeking to offer online casino services to individuals in New Zealand, whether based locally or offshore. It is anticipated that large offshore gambling companies will feature prominently among applicants for the 15 licences. These licences will be valid for three years and renewable for a further period of five years. Operators will be subject to strict conditions, including mandatory age and identity verification, advertising restrictions, harm minimisation obligations and fines of up to $5 million for breaches.

 

While the Bill is intended to facilitate a safe and compliant regulated online casino gambling market, it has attracted strong opposition from more than 50 sporting organisations. Unlike the current Class 4 ‘pokie trusts’ system, which distributes millions each year to grassroots and community sport, the new framework does not require online casino operators to contribute to community funding. Sporting leaders have warned that the change could severely impact local organisations already facing financial pressure due to a lack of funding.

 

The Bill is currently before the select committee and a report on the Bill is due in November 2025.

 

Biometrics Processing Privacy Code 2025

In last summer’s edition of Commercial eSpeaking (#69), we reported on the draft Biometrics Processing Privacy Code. Since then, the Office of the Privacy Commissioner has finalised the Code; this will take effect on 3 November 2025. Organisations already using biometric technologies will have until 3 August 2026 to ensure full compliance.

 

The Code applies to organisations using automated processes to collect and use biometric information – that is, information about a person’s physical features or behavioural traits, such as facial features, fingerprints, voice or eye patterns.

 

The Code introduces 13 rules that go beyond the general information privacy principles in the Privacy Act 2020, requiring businesses that collect biometric data to take a more rigorous and transparent approach. These rules can be broadly categorised in the following way:

 

  • Purpose: Organisations must clearly identify why they are collecting biometric information and ensure that collection is necessary, effective and proportionate to that purpose
  • Safeguards: Adequate privacy protections must be in place before collection, including measures to reduce privacy risks, ensure system accuracy and strengthen security
  • Proportionality: Biometric data should only be collected where there are reasonable grounds to believe that the benefits of collection outweigh the potential privacy impacts on individuals
  • Openness: Individuals must be informed about how their biometric data will be used and disclosed so they can make an informed decision about providing it, and
  • Use limits: The Code places clear limitations on how biometric data can be used and when it may be disclosed.

 

Each rule contains specific obligations that may impact how your business collects, uses and protects biometric information. As a result, it is important that businesses review their biometric systems and policies to ensure compliance with the Code as the effective date (3 November) approaches.

 

To view the full and detailed list of the rules under the Code, please click here.

 

If you need any guidance on any of the above topics, please don’t hesitate to contact us.

 

 

DISCLAIMER: All the information published in Commercial eSpeaking is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this newsletter. Views expressed are those of individual authors, and do not necessarily reflect the view of Edmonds Judd. Articles appearing in Commercial eSpeaking may be reproduced with prior approval from the editor and credit given to the source.
Copyright, NZ LAW Limited, 2025.     Editor: Adrienne Olsen     E-mail: [email protected]    Ph: 029 286 3650