NZ HDCA
Harmful Digital Communications Act 2015
Establishes 10 communication principles and creates both criminal offenses and civil remedies for harmful digital communications. Amended 2022 for intimate image sharing. Note: Post-Christchurch rapid classification powers are in a separate law (Films, Videos, and Publications Classification Amendment Act 2021).
Jurisdiction
New Zealand
Enacted
Pending
Effective
Nov 1, 2015
Enforcement
Netsafe (approved agency); District Court
Why It Matters
Robust online harm framework without AI-specific regulation. Shows alternative "existing laws" approach to online safety.
Recent Developments
Government maintains "light-touch" AI approach—no AI-specific legislation planned. Christchurch Call signatories include 50+ governments.
At a Glance
Requires
Who Must Comply
- Individuals and platforms in New Zealand
Obligations fall on:
Safety Provisions
- 10 communication principles defining harmful communications
- Criminal offenses: up to $50,000 fine or 2 years imprisonment
- Civil remedies for victims
- 2022 amendment addressed intimate image sharing
- Related: Classification Act 2021 amendment added Chief Censor rapid classification powers post-Christchurch
Compliance & Enforcement
Penalties
NZD 50K; criminal (up to 2yr)
View on map
New Zealand
Focus Areas
Cite This
APA
New Zealand. (2015). Harmful Digital Communications Act 2015.
Related Regulations
NZ Biometric Code
Sets specific legal requirements under Privacy Act for collecting and using biometric data such as facial recognition and fingerprint scans. Prohibits particularly intrusive uses including emotion prediction and inferring protected characteristics like ethnicity or sex.
NZ Online Safety Bill
Would bar under-16s from holding accounts on age-restricted platforms, require age assurance beyond self-declared dates of birth, and require operators to conduct and report on child safety risk assessments for users under 18. Expressly brings AI companion platforms within scope.
Brunei PDPO
Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.
India DPDP Act
STRICTEST children's provisions in APAC. Children = under 18; verifiable parental consent MANDATORY; PROHIBITION on tracking, behavioral monitoring, targeted advertising to children.
KR AI Ethics Principles
Government-wide AI ethics principles issued under Article 27 of Korea's AI Framework Act, setting three core values and seven principles applying across the AI lifecycle. Non-binding, addressed to AI suppliers, users, and government.
China CSL Amendments
First major revision of China's foundational Cybersecurity Law since 2017. Introduces formal AI governance provisions, significantly increases penalties, and expands extraterritorial application to all cybersecurity violations.
Last updated January 22, 2026. Verify against primary sources before relying on this information.