Third-Party Debt Collection Agencies In NZ: Compliance Obligations

Late payments are part of running a small business, but that doesn’t make them any less stressful. When invoices drag out past due dates (and reminders stop working), many business owners start looking at using a third-party debt collection agency to recover what they’re owed without burning time and energy chasing payments.

That can be a smart move - but it’s also a legal and reputational risk if it’s handled badly. In New Zealand, while a debt collector is responsible for its own conduct, you generally can’t treat compliance as “someone else’s problem”. If a collector acts in a way that triggers a complaint (for example, misleading statements, unreasonable pressure, or sloppy handling of personal information), your business may still face commercial fallout (and in some cases legal issues), especially if you’ve instructed, enabled, or failed to put reasonable controls around the process.

Below, we break down how third-party debt collection agencies work, the key NZ laws and codes you need to keep in mind, and practical steps to engage a collector while protecting your business from day one.

What Are Third-Party Debt Collection Agencies, And When Should You Use One?

Third-party debt collection agencies are external businesses you engage to recover unpaid debts on your behalf. Typically, they’ll contact the debtor (your customer/client) by email, phone, letter, or a mix of all three, and seek payment according to an agreed process.

Small businesses usually consider a third-party collector when:

• Invoices are significantly overdue and internal follow-ups haven’t worked.
• You want to keep your own staff out of uncomfortable or time-consuming debt discussions.
• You’re dealing with repeat offenders or high-volume overdue accounts.
• The debt is valid, clear, and properly documented (this is important).

That said, it’s not always the right first step. If the debtor is disputing the invoice (for example, they say the work wasn’t completed, the goods weren’t delivered, or they never agreed to the price), a debt collector may escalate the conflict rather than resolve it. In those situations, you’ll often want to sort the underlying dispute first.

Practical tip: before you engage a collector, make sure your payment terms are clear and enforceable. Many payment disputes come back to unclear scope, unclear due dates, or missing documentation. Tight Business Terms can make debt recovery much smoother (and help you avoid arguments about what was agreed in the first place).

What Legal Rules Apply To Debt Collection In New Zealand?

New Zealand doesn’t have one single “Debt Collection Act” that covers everything. Instead, debt collection conduct is shaped by a mix of consumer protection, privacy, contract, and sometimes credit-related rules and codes. Even if a third-party collector is the one making contact, your business should understand the compliance framework so you can instruct them properly and spot problems early.

Fair Trading Act 1986 (Misleading Or Deceptive Conduct)

The Fair Trading Act 1986 broadly prohibits misleading or deceptive conduct in trade. In a debt collection context, that can include things like:

• Threatening legal action that isn’t actually intended or available.
• Misrepresenting the amount owing (including adding “fees” that aren’t allowed under the contract).
• Making claims about consequences (like court judgments or enforcement action) without a proper basis.

From a business perspective, the key point is simple: collection messages must be accurate and supportable. If you’re relying on a third-party agency, make sure their scripts and standard letters don’t overstate your rights or create unnecessary legal exposure.

Harassment And Unreasonable Contact (Pressure Tactics Can Create Risk)

Even where a statement isn’t misleading, repeated or oppressive contact can still create problems. Depending on how a collector behaves, there may be risk under laws dealing with harassment and intimidation (and complaints to regulators or industry bodies can also arise if conduct is unreasonable).

Practical takeaway: build “reasonable contact” limits into your instructions (times, frequency, and tone), and require your collector to keep clear records of all communications.

Contract Law (Do You Actually Have The Right To Claim The Amount?)

Debt recovery starts with the contract. Your collector can only pursue what your customer legally owes.

That usually means you need clear evidence of:

• What was agreed (scope, price, deliverables, timing);
• When payment was due;
• Whether interest or recovery costs are chargeable; and
• Whether the customer has a legitimate dispute or set-off right.

If you don’t have strong documentation, a collector may still pursue the debt - but your leverage drops quickly if the customer pushes back.

This is why having a properly drafted customer agreement matters. If you’re operating without a tailored contract (or you’re using informal email threads), it may be worth putting a proper Customer Contract in place so future collections don’t turn into “he said / she said” disputes.

Limitation Periods (Time Limits To Enforce Debts)

Even a valid debt can become harder (or impossible) to enforce if too much time passes. New Zealand limitation rules can affect when you can start a claim, and the applicable timeframe can depend on the type of debt and the legal basis for the claim.

Practical takeaway: don’t let overdue accounts drift for years without a plan. If a debt is significant, get advice on time limits before you assume you can recover it later.

Privacy Act 2020 (Handling Debtor Information Properly)

Most debt collection involves personal information - names, phone numbers, addresses, payment history, and sometimes sensitive notes about hardship. Under the Privacy Act 2020, you need to collect, use, store, and disclose personal information in a lawful and fair way.

Importantly, engaging a third-party debt collector usually means you’ll be disclosing personal information about the debtor to another business. That’s not automatically unlawful, but you need to ensure it’s done for a proper purpose and with appropriate safeguards (more on this below).

Credit Reporting (If Default Information Is Shared, Extra Rules May Apply)

Some debt collection processes involve credit reporting. If a collector (or your business) proposes listing a payment default or sharing information with a credit reporter, this can trigger extra requirements under New Zealand’s credit reporting rules (including the Credit Reporting Privacy Code).

Practical takeaway: don’t assume you can “just list” someone on a credit file as leverage. Make sure any credit reporting is lawful, accurate, properly notified, and handled by an organisation entitled to do it.

If You Offer Consumer Credit, Extra Rules May Apply

If your business provides goods or services on credit to individuals (for example, ongoing finance arrangements, deferred payment plans, or charging interest/fees for late payment), you could be dealing with the Credit Contracts and Consumer Finance Act 2003 (CCCFA). The CCCFA is strict, and breaches can be costly.

Not every overdue invoice triggers CCCFA obligations - but if you’re unsure whether your arrangement is “consumer credit,” it’s worth getting advice early rather than assuming it’s just a standard invoice situation.

How To Engage A Third-Party Debt Collector (And What To Put In Writing)

Once you decide to use third-party debt collection agencies, the biggest compliance step is making sure the relationship is properly documented and the collector is operating within clear boundaries.

A solid written agreement protects you in two ways:

• It sets clear expectations about what the agency can and can’t do.
• It creates accountability if the collector’s conduct exposes your business to complaints or legal issues.

Many businesses document this through a written service agreement - often a tailored Debt Collection Agreement - to cover the key terms in one place.

Key Commercial Terms To Confirm Upfront

Before you hand over files, make sure you understand how the agency charges and what success looks like. For example:

• Fees: fixed fee, commission percentage, or hybrid?
• Authority: can they negotiate settlements, payment plans, or discounts - or do they need your sign-off?
• Timing: how soon will they begin contact, and how often will they follow up?
• Reporting: how will you be updated and how frequently?
• Escalation: when do they recommend legal action, and who instructs that step?

Compliance And Conduct Controls You Should Include

This is the part small businesses often skip - but it’s where most risk sits. Consider requiring the agency to:

• Comply with the Privacy Act 2020 and maintain appropriate security controls.
• Only contact the debtor at reasonable times and through reasonable channels (and not excessively).
• Stop or pause collection activity if the debtor raises a genuine dispute (until you provide further instructions).
• Not make misleading statements, and not suggest court action, bankruptcy, or credit reporting unless it’s legally available, factually accurate, and (where appropriate) approved by you.
• Keep records of communications (what was said, when, and by whom).

It can feel awkward “telling the professionals how to do their job,” but this is your brand and your customer relationship on the line. Putting boundaries in writing helps everyone.

Have A Clean Handover Pack (So The Debt Is Easy To Prove)

Third-party collectors work best when the debt is straightforward. A simple “handover pack” might include:

• Signed agreement or accepted quote / scope of work;
• Invoices and statements (including due dates);
• Proof of delivery or completion (where relevant);
• Records of reminders already sent; and
• Notes on any prior disputes or concessions.

If you’re regularly chasing late invoices, you might also want to tighten your internal payment process. For many businesses, improving credit control and contracts goes hand-in-hand with Ensuring Your Clients Pay before accounts become “collection worthy.”

Privacy, Data Sharing And Call Recording: Handling Customer Information Lawfully

When you use third-party debt collection agencies, you’re typically sharing information about identifiable people (or sole traders). That means your privacy obligations aren’t theoretical - they’re operational.

Only Share What’s Necessary

A good rule of thumb is data minimisation: share what the collector needs to recover the debt, not everything you’ve ever recorded about the customer.

For example, you may not need to share:

• internal commentary about the customer’s attitude or personal circumstances (unless genuinely relevant);
• unrelated purchase history; or
• any sensitive personal information unless there is a strong, lawful reason.

Make Sure Your Privacy Policy Matches Reality

If you collect customer information, your business should have a Privacy Policy that accurately describes what you collect, why you collect it, and who you might share it with (including service providers like debt collectors).

This isn’t about adding pages of legal text - it’s about transparency. When privacy documentation doesn’t match real-world practices, it increases complaint risk and makes it harder to defend your process if something goes wrong.

Call Recording And Communications

Many collection agencies call debtors, and some businesses also record calls with customers (for training, quality, or dispute purposes). In New Zealand, call recording is often lawful where at least one party to the call consents (for example, the caller), but privacy obligations still matter - including being transparent and not collecting personal information in an unfair or unreasonably intrusive way.

Even if the agency is doing the calling, it’s worth ensuring their approach includes clear notification (for example, an upfront message that calls may be recorded) and appropriate storage and access controls. If you’re unsure what’s allowed and what’s risky, the rules around Business Call Recording Laws in New Zealand are a useful starting point.

Have A Plan For Privacy Incidents

Debt collection involves sensitive communications, and mistakes happen - an email sent to the wrong address, an attachment with too much information, or a system access issue.

Having a documented Data Breach Response Plan helps you respond quickly and consistently, including deciding whether notification obligations apply and how to reduce harm.

Common Compliance Risks For Small Businesses (And How To Avoid Them)

Most issues with third-party debt collection agencies don’t come from the decision to use an agency - they come from lack of controls, unclear instructions, or poor documentation.

Here are common risks we see for small NZ businesses, and how to manage them.

1. Collecting A Disputed Debt As If It’s Undisputed

If a customer has raised a genuine dispute (quality issues, wrong amount, incomplete work), aggressive collection can backfire fast. It can escalate complaints, damage your brand, and increase the chance the debtor digs in and refuses to engage.

What to do: build a simple dispute “pause” rule into your collection instructions and your agreement. If the debtor disputes the debt, your agency should stop escalation and report back so you can decide the next step.

2. Adding Fees Or Interest Without A Contractual Right

Some businesses assume they can add “collection costs” or interest automatically. In reality, you generally need a contractual basis to charge these (and the amounts must be reasonable and properly disclosed).

What to do: check your customer contract and terms before you instruct a collector to claim extra amounts. If you want the ability to recover costs in future, update your agreements and invoicing processes so it’s clear upfront.

3. Overstepping With Threats Or Pressure

Threatening bankruptcy, court proceedings, or credit reporting when those actions aren’t actually intended (or aren’t legally available) is a major red flag. Even where legal action is possible, it must be communicated carefully and accurately.

What to do: require agency communications to be professional, accurate, and not misleading. If the debt is significant and you’re considering litigation, get legal advice on your actual options before anyone starts making “final warning” threats.

4. Privacy Complaints From Oversharing Or Sloppy Processes

A privacy complaint can arise if:

• too much customer information is shared with the agency;
• information is kept longer than necessary; or
• the debtor feels blindsided that their details were handed over.

What to do: make sure your privacy documentation and internal processes match your collection process, and only share what’s needed to recover the debt.

5. Choosing The Wrong Tool For The Job

Sometimes a third-party collector is the right move. Other times, the more effective option might be:

• a formal demand letter;
• negotiated settlement terms;
• mediation; or
• taking steps under your contract to suspend service or enforce payment terms.

What to do: treat debt recovery as part of your broader legal foundations - contracts, invoicing, customer onboarding, and dispute processes all work together. If you’re unsure which approach fits your situation, it’s worth getting tailored advice before you escalate.

Key Takeaways

• Using third-party debt collection agencies can save you time and improve recovery outcomes, but you still need to manage compliance and reputational risk through clear instructions and written controls.
• NZ debt collection obligations are shaped by multiple laws and codes, including the Fair Trading Act 1986 (no misleading conduct), the Privacy Act 2020 (careful handling and disclosure of personal information), and (where relevant) credit reporting requirements.
• A strong written arrangement (often a Debt Collection Agreement) should clearly set out fees, authority, reporting, dispute handling, privacy/security expectations, and conduct limits.
• Only pursue amounts you can actually justify under the contract, and don’t add fees or interest unless you have a proper basis to do so.
• Privacy isn’t optional - make sure your Privacy Policy and data handling processes reflect that you may share information with debt recovery providers.
• Good debt recovery starts before the invoice is overdue: clear business terms, proper customer contracts, and a consistent follow-up process make collection faster and safer.

If you’d like help engaging third-party debt collection agencies, putting the right agreement in place, or tightening your payment terms and contracts, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.