Social Media Laws In New Zealand: Business Compliance Essentials

Social media can be one of the fastest ways to build a brand in New Zealand. But it’s also one of the easiest ways to accidentally break the rules - because a “quick post” can still be an advertisement, a contract, a privacy issue, or even a reputational and legal risk.

If you’re running a small business, the good news is you don’t need to be a lawyer to manage social media compliance. You just need a clear framework, the right internal processes, and a few key legal documents (so you’re protected from day one).

Below, we break down the key social media laws New Zealand businesses should know, plus practical steps you can take to stay compliant while still posting confidently.

What Do “Social Media Laws” Mean For NZ Businesses?

There isn’t one single “social media law” in New Zealand. Instead, your posts, ads, DMs, and community management are regulated by a mix of laws and standards that apply to marketing, privacy, employment, IP, and online conduct.

In practice, social media law and compliance in New Zealand for businesses usually comes down to these questions:

• Are you advertising truthfully? (Consumer and fair trading laws, plus advertising standards)
• Are you collecting/using personal information properly? (Privacy law)
• Are you sending marketing messages lawfully? (Electronic marketing and spam rules)
• Are you using content you have rights to use? (Copyright and trade mark issues)
• Are you managing staff access and conduct appropriately? (Employment and workplace policies)
• Are your promotions and competitions run fairly? (Consumer law, platform rules, and well-drafted terms)

Think of it like this: social media is just a channel. The legal obligations are the same ones that apply to your website, your in-store signage, your packaging, and your customer service - they’re just more public (and more permanent) online.

Advertising And Promotions: What Can You Legally Say On Social Media?

If you promote your products or services on Instagram, Facebook, TikTok, LinkedIn or similar platforms, you’re advertising. That means your content needs to comply with New Zealand consumer and advertising laws, including the Fair Trading Act 1986.

From a practical perspective, the Fair Trading Act is about one core rule: don’t mislead or deceive your customers (even unintentionally).

It’s also worth being aware of the Advertising Standards Authority (ASA) codes. These aren’t “laws” in the same way as an Act of Parliament, but they’re widely followed in New Zealand and complaints can lead to ads being taken down - including influencer content that isn’t clearly disclosed as advertising.

Common Social Media Compliance Traps For Small Businesses

These are the types of posts that can create legal risk if they’re not accurate or properly explained:

• Before-and-after claims (especially if results vary, or images are edited)
• “Guaranteed” outcomes (e.g. “will double your sales”, “works every time”)
• Health, beauty, or wellness claims that aren’t properly substantiated
• Price promotions that don’t disclose key conditions (minimum spend, limited stock, time limits)
• “Was/now” pricing that implies a discount when the “was” price wasn’t genuinely offered
• Testimonials and reviews that are selective or not genuine

This doesn’t mean you can’t market confidently. It just means your posts should be accurate, supportable, and not missing key information.

Giveaways And Competitions: Don’t Wing The Rules

Running a giveaway can be great for reach, but it’s also a classic “set and forget” legal risk. Even small promotions should have clear terms so customers know:

• how to enter
• when entries open and close
• how the winner is chosen
• what the prize is (and any limits, like expiry dates)
• how you’ll contact the winner
• what happens if the winner doesn’t respond

Having proper Competition Terms & Conditions also helps protect you if someone later disputes the outcome or claims the prize wasn’t delivered as promised.

Also keep in mind that some promotions can trigger additional rules depending on how they’re structured (for example, if entry requires payment or the promotion looks like gambling/lottery activity). It’s worth checking this before you launch.

If you sell online (even just via DMs), it’s also smart to have clear Website Terms and Conditions to set expectations around orders, delivery, refunds, and how disputes are handled.

Privacy And Data: What If You Collect Customer Info Through Social Media?

Many small businesses collect personal information through social media without even realising it - for example, when you take orders in DMs, run a lead form, collect emails for a mailing list, or save customer details in a spreadsheet after a giveaway.

In New Zealand, the Privacy Act 2020 applies to personal information. “Personal information” includes anything that identifies (or could identify) an individual, such as:

• name, email, phone number
• delivery address
• social media handle linked to a person
• photos or videos of customers (where they’re identifiable)
• messages that include personal details

What Your Business Should Be Doing Under The Privacy Act

You generally need to take reasonable steps to:

• only collect what you need for a legitimate business purpose
• tell people what you’re collecting and why (this is where a privacy policy and collection notice helps)
• store it securely and restrict who in your business can access it
• not use it for unrelated purposes (for example, adding entrants to a marketing list without consent can be risky)
• respond appropriately if someone asks to access or correct their information

If you collect emails or phone numbers for marketing, you should also consider the Unsolicited Electronic Messages Act 2007 (anti-spam rules). In general terms, you’ll want consent (express or inferred), a clear identification of the sender, and an easy unsubscribe option in your electronic marketing messages.

For most businesses, having a clear Privacy Policy is a simple, practical way to show customers you take privacy seriously and to explain your processes in plain English.

Also keep in mind: if you share customer images, testimonials, screenshots of DMs, or “customer story” posts, you should consider whether consent is needed (especially if the customer is identifiable or the content reveals something private).

Copyright, Trade Marks, And Content Reuse: Can You Use That Photo, Audio, Or Meme?

One of the biggest misconceptions in marketing is: “If it’s on the internet, it’s free to use.”

In reality, social media is full of copyright-protected content - photography, video, music, graphics, written copy, and even some types of branding.

For small businesses, the most common risk areas are:

• using someone else’s photo (including images found on Google or Pinterest)
• reposting user-generated content without permission (especially for commercial use)
• using music or audio in business content without the right licence
• copying competitor captions or content too closely
• using logos or brand elements that could infringe a trade mark

If you’re working with photographers, designers, marketers, or content creators, make sure you’ve clearly agreed who owns the content and how you can use it. In many cases, the safest approach is to use a properly drafted Service Agreement (or contractor agreement) that deals with intellectual property, deliverables, and usage rights.

And if you’ve built a strong brand, consider whether trade mark protection is worth it - because your social presence can become one of your most valuable assets.

Staff, Contractors, And Social Media: How Do You Avoid Workplace Disputes?

As soon as you have staff or contractors posting on behalf of your business (or even posting about your business from their personal accounts), social media becomes an employment and HR issue as well as a marketing one.

This is where many businesses get caught out: you can have a great brand voice, but without clear rules internally, you can still end up with posts that breach privacy, disclose confidential information, or cause reputational harm.

What To Put In Place Before You Hand Over The Passwords

A good starting point is making sure each team member has a clear Employment Contract (or contractor agreement) that addresses duties, confidentiality, and expectations.

From there, a written social media policy (often included within a staff handbook) can set clear boundaries around:

• who is authorised to post on business accounts
• approval processes for promotions and public statements
• how to respond to complaints, refunds requests, or negative reviews
• confidentiality and what information can’t be shared
• privacy expectations (e.g. no posting customer details or screenshots without consent)
• brand tone, do’s and don’ts, and escalation steps

If you want something comprehensive (and easy to roll out), a Workplace Policy package is often the cleanest way to cover social media expectations alongside privacy, conduct, and other key workplace rules.

Influencers, Brand Ambassadors, And Paid Partnerships

If you engage influencers or ambassadors to promote your products, you should treat that like any other marketing arrangement: set clear expectations in writing.

In addition to your contract terms, make sure sponsored or gifted content is clearly disclosed (for example, as an ad) so it’s transparent to consumers and consistent with ASA guidance and platform rules.

Even for small campaigns, you’ll usually want to cover:

• what content must be posted (and by when)
• approval rights (e.g. you can approve content before it goes live)
• who owns the photos and videos created
• whether you can repost the content on your own channels and ads
• payment terms, gifting arrangements, and what happens if deliverables aren’t met

A written agreement also reduces the risk of messy disputes if the relationship breaks down or expectations were never aligned in the first place.

Managing Risk Day-To-Day: Practical Social Media Compliance Checklist

Most social media issues don’t come from big, deliberate decisions. They come from fast-moving day-to-day posting, where details get missed.

Here’s a practical checklist you can implement in your business to reduce legal risk while keeping your marketing momentum.

1) Use A Simple “Pre-Post” Review Process

Before posting (especially ads and promotions), ask:

• Is everything in this post true and supportable?
• Could it be read as a guarantee or absolute claim?
• Are there key terms missing (time limits, exclusions, stock limits)?
• If we’re using an image/video, do we have the rights and permissions?

2) Keep Records Of Offers And Promotions

If you’re running a discount or “limited time” offer, keep a record of:

• what you offered
• when it ran
• the terms you published
• any changes you made

This is helpful if a customer later disputes the terms or claims they were misled.

3) Don’t Collect More Data Than You Need

If you run a giveaway, avoid asking for extra information “just because”. Collect only what you need to administer the promotion, and be careful about reusing those details for marketing unless you have clear consent.

4) Plan For Complaints And Negative Reviews

Negative reviews are a normal part of running a business, but how you respond matters. A defensive reply can escalate into a reputational issue, and sharing customer personal details in a response can create privacy risk.

Make sure your team knows:

• when to take the conversation offline
• who can approve refunds or remedies
• what can and can’t be said publicly

5) Set Clear Ownership And Access Rules For Accounts

If multiple team members manage your accounts, make sure you’re clear on:

• who owns the account and login credentials (the business, not the individual)
• how access is granted and removed when staff leave
• whether any personal accounts are being used for business purposes

This can save you a lot of stress if there’s a team change or dispute later.

Key Takeaways

• Social media compliance in New Zealand is usually a mix of legal obligations and industry standards, including the Fair Trading Act 1986 (truthful advertising), Privacy Act 2020 (handling personal information), ASA Advertising Standards (including influencer disclosure expectations), and intellectual property rules (copyright and trade marks).
• Anything you post to promote your products or services can be treated as advertising, so make sure claims are accurate, not misleading, and include key terms and conditions.
• Giveaways and promotions should have clear written rules to reduce disputes and show customers exactly how the promotion works (and some promotion structures may trigger additional requirements, depending on how they’re run).
• If you collect customer information via DMs, lead forms, or competitions, you should have a privacy-compliant process and a Privacy Policy explaining what you collect and how you use it - and make sure your electronic marketing also complies with the Unsolicited Electronic Messages Act 2007.
• Using images, videos, music, or reposted content without permission can expose your business to copyright and brand infringement issues, so it’s worth locking in usage rights via proper agreements.
• If staff or contractors manage your social channels, clear contracts and workplace policies help prevent privacy breaches, inconsistent messaging, and reputational damage.

If you’d like help getting your social media marketing legally sorted (including your Privacy Policy, Competition Terms & Conditions, or internal Workplace Policy settings), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.

Note: This article is general information only and does not constitute legal advice. If you need advice about your specific circumstances, you should speak with a lawyer.