How to Respond to a Notice to Inspect Company Records in New Zealand

Getting a notice to inspect company records can rattle even well-run businesses. Founders often make the same mistakes at the start: ignoring the notice because it looks informal, handing over everything without checking what the person is actually entitled to see, or scrambling to “fix” records before responding. Each of those moves can create extra risk.

The right response is usually more measured. You need to confirm who is asking, what records they can lawfully inspect, whether the notice meets the legal requirements, and how to give access without disclosing material that falls outside the request. You also need to think about privacy, confidentiality, and how your company has kept its statutory records to date.

This guide explains how to respond to a notice to inspect company records in New Zealand, when inspection rights usually arise, what steps company directors and business owners should take, and where founders often get caught before they spend time and money on the wrong response.

Overview

A notice to inspect company records is not something to ignore, but it does not mean the requester can automatically see every document your business holds. Your first job is to work out the legal basis for the request, then respond in a way that is accurate, timely, and limited to what the law actually requires.

• identify who issued the notice and in what capacity
• check which company records are being requested and whether the law gives a right of inspection
• review your Companies Act obligations around maintaining statutory records
• separate statutory company records from general business documents, emails, and internal working papers
• consider privacy, confidentiality, and whether redactions are appropriate
• keep a written record of your response, timing, and what was provided
• avoid altering, backdating, or selectively updating records once a notice arrives

What To Know Before You Start

A notice to inspect company records usually means someone says they have a legal right to look at certain records your company must keep. It is mainly a corporate governance issue, not just an admin task.

In New Zealand, companies are required to maintain certain statutory records under company law. These can include constitutional documents, registers of directors, share registers, records of share issues and transfers, and minutes or resolutions that the company must keep. The exact inspection rights depend on the type of record, who is asking, and the legal basis they rely on.

This matters for startups and SMEs because many smaller companies mix formal company records with everyday business files. A founder may assume that “company records” means everything in the business drive, from customer terms and contracts to staff performance notes. That is usually too broad.

It also matters because a weak response can expose separate problems. If your share register is out of date, director consents were never properly stored, or shareholder resolutions were handled informally over email without being recorded, an inspection request can bring those gaps to the surface quickly.

What counts as company records?

Company records commonly include the formal documents a company is legally required to create and keep. Depending on the issue, this may cover:

• the company constitution, if there is one
• minutes of shareholder meetings and resolutions
• minutes of directors’ meetings and written resolutions, where required to be kept
• the interests register
• share registers and records relating to shares
• director and shareholder details held as part of statutory records
• certain accounting records the company must retain

That does not mean every internal document is open for inspection. General management reports, draft advice, legal advice subject to privilege, routine staff files, and customer databases are different categories and should not be handed over automatically just because someone uses the phrase “company records”.

Who may ask to inspect records?

The answer depends on the record and the law relied on. In practice, requests often come from:

• a current shareholder
• a director
• an authorised regulator or government body
• a liquidator, receiver, or administrator in an insolvency context
• a person acting under a court order or other formal authority

The key point is that inspection rights are not identical for every person. A shareholder may have rights to inspect some records, but not unrestricted access to all commercially sensitive information. A regulator may have broader powers, but those powers should still be identified clearly in the notice.

Why founders often misjudge the issue

The main risk is treating the notice as either trivial or unlimited. Some businesses reply casually and assume a short email is enough. Others panic and over-disclose.

This is where founders often get caught. The inspection request may arrive right before a fundraising round, a shareholder dispute, a business sale, or a board disagreement. In those moments, records become evidence of what the company has actually done. That makes accuracy and consistency critical before you sign further documents or make promises about the company’s governance history.

When This Issue Comes Up

A notice to inspect company records usually appears when there is a trigger event in the life of the business. It rarely arrives out of nowhere.

Shareholder disagreements

A shareholder may ask to inspect records when they are concerned about dilution, director conduct, dividend decisions, or how shares were issued. This is common in founder-led companies where earlier arrangements were agreed informally and not documented properly.

For example, one founder may believe they were promised equity, but the share register and board resolutions do not reflect that understanding. An inspection request often follows when the relationship breaks down.

Investment and due diligence

Prospective investors usually ask for access to governance documents during due diligence, but that process is usually consensual and managed under agreed terms. A formal notice is different. It can arise if an existing investor or shareholder believes the company is not being transparent.

Before you spend money on company setup for a new raise, check that your statutory records line up with what you have told investors. A request to inspect records may expose inconsistencies between your cap table, shareholder agreements, Companies Office filings, and board approvals.

Regulatory inquiries

Some notices come from authorities carrying out regulatory functions. The scope of the request may be broader, and the timing expectations may be tighter. Even then, it is still worth checking exactly which power is being used and what material falls within it.

This is especially relevant if your business handles personal information, markets financial products, or operates in a more regulated industry. A company record request can overlap with privacy policy, record-keeping, and disclosure obligations.

Transactions, exits, and internal clean-ups

The issue also comes up before a sale, merger, restructuring, or internal governance clean-up. Sometimes the notice is not hostile. A shareholder or adviser may simply want formal access to confirm the company’s records are in order.

Even in a cooperative situation, do not treat the response casually. The way documents are produced can affect confidentiality, waiver risks, and the company’s bargaining position.

Practical Steps And Common Mistakes

The safest response is to verify the request, define the scope, preserve the records, and answer in a controlled way. Most problems come from rushing.

1. Confirm the notice is valid

Start with the basics. Check:

• who sent the notice
• whether they have identified their role or authority
• what records they want to inspect
• the legal basis they rely on
• any stated timeframe for response
• whether the request is for inspection, copies, or both

If the notice is vague, ask for clarification promptly. You do not need to guess what the requester means by “all company records” if that wording is too broad to action sensibly.

2. Preserve records exactly as they are

Do not alter, tidy up, re-date, or replace records once a notice arrives. If your records are incomplete, that issue needs to be handled carefully and transparently.

A common founder mistake is trying to recreate missing minutes after the fact so the file “looks right”. That can make the situation much worse. If documents were never prepared or signed at the relevant time, get advice before doing anything further.

3. Separate statutory records from general business files

The next step is to identify what actually falls within the inspection right. This exercise often reveals that the request should be narrowed.

Separate documents into categories such as:

• statutory company records
• board and shareholder resolutions
• Companies Office filing records
• financial and accounting records the company must keep
• commercial contracts
• employment contracts and records
• customer and supplier data
• legal advice and privileged material

This matters because privacy and confidentiality obligations still apply. If records contain personal information about employees, contractors, or customers, do not assume those details can be disclosed just because the request is framed broadly.

4. Review privacy and confidentiality issues

Many SMEs keep records in mixed folders or shared inboxes. A notice to inspect company records can therefore capture unrelated personal information or commercially sensitive data unless someone reviews the documents carefully first.

Think about whether the material contains:

• employee personal information
• customer details
• supplier pricing
• bank account information
• passwords or access credentials
• trade secrets or technical know-how
• third-party confidential information

Some information may need to be redacted, withheld, or provided under controlled inspection conditions, depending on the legal basis for the request. The company should take a considered approach rather than producing a raw export from its systems.

5. Check your governance documents match each other

Inspection requests often expose inconsistencies between the company constitution, shareholder agreement, board minutes, cap table, and Companies Office entries. Those inconsistencies can create practical and legal problems.

For example, check whether:

• share issues were properly approved
• share transfers were recorded correctly
• director appointments and resignations match filings
• written resolutions were signed as required
• the interests register has been maintained
• the constitution says something different from what the board has been doing in practice

If you spot issues, resist the urge to patch them informally. Some defects can be corrected, but the method matters.

6. Respond in writing and keep a response file

Your reply should state what you will provide, on what basis, and when. If you are refusing part of the request or narrowing the scope, explain why in plain terms.

Keep a clear record of:

• the notice received
• internal decisions on scope
• documents identified
• redactions made
• what was provided
• when access was given
• any objections or follow-up correspondence

This written trail helps if the requester later claims the company was obstructive or incomplete.

7. Avoid the most common mistakes

The most common errors are predictable and avoidable. Businesses often:

• miss the deadline because no one owns the response
• send documents before checking authority
• produce too much material
• fail to protect privileged or confidential documents
• ignore privacy issues
• discover statutory records are missing and improvise replacements
• respond emotionally where there is a shareholder dispute

A calm, documented process usually puts the company in a much stronger position.

What if your records are incomplete?

Incomplete records are common in early-stage businesses, especially where founders moved fast and treated governance as a later clean-up task. That does not mean the issue is minor.

If records are missing, identify exactly what is absent and why. There is a big difference between a resolution that exists but is misfiled, and a transaction that was never properly approved. Before you sign any corrective documents, make sure they reflect what actually happened and are legally appropriate.

What if the request seems improper?

You do not have to accept an overreaching request at face value. If the requester is asking for documents outside their entitlement, seeking broad access for a collateral purpose, or demanding material that includes unrelated confidential information, the company may be able to object or limit the response.

The right approach depends on the record type and context. The point is not to stonewall. It is to respond lawfully and proportionately.

FAQs

Do I have to provide every document the company holds?

No. A notice to inspect company records does not automatically entitle someone to all business documents. The scope depends on the legal right being relied on and the type of record requested.

Can I redact personal or confidential information?

Often, yes. Redactions may be appropriate where documents contain unrelated personal information, third-party confidential material, or information outside the lawful scope of the inspection. The company should take care that any redactions are justifiable and consistent.

What if the company never properly kept its statutory records?

Do not try to backdate or recreate records casually. Work out what is missing, preserve existing evidence, and get legal advice on the safest way to address the gap.

Does a shareholder have unlimited inspection rights?

No. Shareholders may have rights to inspect certain records, but those rights are not usually unlimited across all internal documents, communications, and commercially sensitive material.

Should we get advice before replying?

If the request is broad, tied to a dispute, or exposes missing governance records, getting advice early is sensible. That is particularly true before you disclose documents, refuse access, or attempt to correct historical records.

Key Takeaways

• A notice to inspect company records should be taken seriously, but the requester is not automatically entitled to everything your business holds.
• Your first steps are to confirm the requester’s authority, identify the legal basis for the inspection, and define the scope of records actually covered.
• Statutory company records are different from general business files, employee records, customer data, and privileged legal advice.
• Privacy, confidentiality, and accurate record-keeping all matter when deciding what to provide and how to provide it.
• Do not alter, backdate, or “tidy up” documents after a notice arrives, even if your governance records are incomplete.
• Keep a written response file so the company can show what it reviewed, what it produced, and why.

If your business is dealing with how to respond to a notice to inspect company records and wants help with reviewing statutory records, managing inspection requests, shareholder governance issues, privacy and confidentiality concerns, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.