Governance and accountability
This guidance document from the Ministry of Business, Innovation and Employment outlines governance, compliance, and risk management frameworks for businesses developing or using artificial intelligence in New Zealand. It covers assembling multidisciplinary teams, understanding relevant New Zealand legislation such as the Commerce Act and Privacy Act, navigating AI-related risks, and maintaining thorough recordkeeping. Practical considerations are illustrated through a scenario on algorithmic collusion, along with recommendations for aligning with international standards.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
This document is for business leaders, developers, and deployers seeking guidance on responsibly governing and managing AI systems.
What the document contains
The document covers internal governance structures, multidisciplinary team composition, legal compliance obligations under New Zealand law, risk management strategies across the AI lifecycle, and recordkeeping practices for businesses utilizing artificial intelligence.
The document does not provide binding enforcement mechanisms, formal statutory penalties specific to the guidance, or technical source code definitions.
- Establishing clear cross-business lines of oversight and accountability enables effective risk management for artificial intelligence.
- Businesses must identify and comply with relevant New Zealand legislation, including the Commerce Act, Privacy Act, and Consumer Guarantees Act.
- Deploying third-party AI tools without adequate oversight can create risks of illegal outcomes such as algorithmic collusion.
- A balanced approach to risk management across the AI lifecycle involves identifying, assessing, managing, and recording risks systematically.
- Good recordkeeping and documentation practices, including AI model cards, support transparency, auditing, and accountability.
· Assembling a team · Compliance and legal obligations · Scenario A: Appliance Alliance · Risk management · Recordkeeping
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
4/5Clear responsibility for AI outcomes
Clear cross-business lines of oversight and accountability, including across artificial intelligence use or development, enables effective risk management.
Governance and accountability
screening score · 2026-10-24
Fairness
4/5Non-discrimination and equitable treatment
unfair treatment of those impacted by AI-informed actions or decisions due to overly based AI systems and/or human overreliance on those AI systems
Risk management
screening score · 2026-10-24
Human Dignity
0/5Respect for the inherent worth of persons
screening score · 2026-10-24
Human Oversight
4/5Humans remain in control of consequential decisions
unfair treatment of those impacted by AI-informed actions or decisions due to overly based AI systems and/or human overreliance on those AI systems
Risk management
screening score · 2026-10-24
Privacy
4/5Protection of personal data and private life
Any business interacting with personal information is required to have a privacy officer. Privacy officers are responsible for ensuring compliance with the Privacy Act
Compliance and legal obligations
screening score · 2026-10-24
Transparency
4/5Openness about how AI systems work and are used
Robust oversight and governance that promotes transparency and explainability of AI use or development enables business users to demonstrate responsible use
Governance and accountability
screening score · 2026-10-24
Enforcement
4/5Consequences and compliance mechanisms with real force
This type of breach is a criminal offence attracting substantial financial penalties and potential imprisonment.
Scenario A: Appliance Alliance
screening score · 2026-10-24
Impact Assessment
4/5Required assessment of an AI system's risks/impacts before or during use
Conducting a stakeholder impact assessment can help with also identifying who is impacted and possible mitigations.
Risk management
screening score · 2026-10-24