Go to the source before encoding the rule.

• Office of the Privacy Commissioner — Privacy Act 2020 principlesCollection, storage, access, correction, use, disclosure, retention, overseas disclosure, and other information privacy principles.
• Office of the Privacy Commissioner — Breach managementOperational guidance on responding, containing, assessing, notifying, recording, and learning from privacy breaches.
• Inland Revenue — Supplying remote services into New ZealandCurrent information for non-resident businesses about GST on remote services, customer evidence, registration, and business-use distinctions.
• New Zealand Business Number — About the NZBNOfficial explanation of the unique identifier and the primary business information linked to it.
• NZ Digital Government — Legacy system guidanceGuidance on identifying, managing, replacing, or retiring legacy technology and the related operational risks.
• NZ Digital Government — Web Accessibility Standard 1.2Scope and WCAG 2.2 Level AA requirements for mandated New Zealand government organisations. Other organisations can still use accessibility as a quality target without claiming that government scope applies.
• Business.govt.nz — Productivity toolsA government starting point for thinking about digital tools that streamline business tasks and efficiency.

How we use official sources.

During discovery, sources create questions and evidence requirements. During implementation, the client or adviser’s confirmed decision becomes a testable rule. During validation, we verify that the software follows that rule and that the source reference is still current. Faith Forge Labs does not silently infer a compliance position from a search result.

What is deliberately absent.

This desk does not present an exhaustive list of New Zealand law, sector rules, security standards, consumer requirements, employment obligations, records rules, or professional duties. Those depend on the organisation, people, data, industry, offer, and delivery model. The project owner should identify the appropriately qualified reviewers.

Last editorial verification: 30 July 2026 UTC. Always follow the current version on the linked official site.