If you’re running a business, there will be times when you need someone else to deal with “official” matters on your behalf.
Maybe you’re busy running day-to-day operations, you’re overseas, you’re unwell, or you just want your accountant, lawyer, office manager, or a trusted employee to handle a task efficiently.
That’s where an Authority To Act form comes in. This 2026 update reflects current expectations around identification, record-keeping, and practical risk management (especially where organisations are more cautious about fraud and privacy compliance).
In this guide, we’ll walk you through what an Authority To Act form is, when you might need one, how it works, and what to watch out for so you stay protected from day one.
An Authority To Act form (sometimes called an “authorisation to act”, “authority letter”, or “agent authorisation”) is a written document where:
- you (the principal) authorise
- someone else (the agent/representative) to do certain things
- on your behalf with a third party (like a bank, supplier, insurer, government agency, or professional service provider).
In simple terms: it’s proof to a third party that the person in front of them is allowed to make requests, give instructions, sign documents, or receive information for you or your business.
Authority To Act forms are common in both personal and business settings. In a business context, it often comes up where the business owner, director, trustee, or authorised signatory can’t (or shouldn’t have to) handle every admin step themselves.
Authority To Act vs Power Of Attorney
People often confuse an Authority To Act form with a Power of Attorney. They’re not the same thing.
- Authority To Act form: usually limited to specific actions and used for a particular organisation or process (for example, “talk to the bank about our merchant facility” or “lodge this form with the council”).
- Power of Attorney: generally broader, formal, and often used to give someone legal authority to make decisions in a wider range of circumstances. This typically has more stringent signing/witnessing requirements.
If you’re not sure which you need, it’s worth getting advice before you sign anything. The right document depends on the task, the risk level, and what the third party will accept.
You’ll usually need an Authority To Act form when a third party wants clear evidence that your representative is allowed to act for you.
This tends to happen whenever the task involves:
- access to sensitive information (like financial details or personal data)
- making binding decisions (like approving changes, purchases, or services)
- signing documents or accepting terms
- any area where the organisation has to manage fraud and identity risk.
Common Real-World Examples
Here are a few situations where businesses commonly use an Authority To Act form:
- Banking and finance: authorising your accountant or finance manager to speak with the bank about an account, a loan, merchant services, or account admin.
- Commercial leasing: authorising someone to negotiate lease admin, arrange access, or liaise with the landlord (although signing the lease itself should be carefully controlled). A Commercial Lease Review is also a smart step before anything binding is signed.
- Government and compliance: authorising a representative to file forms, respond to requests, or manage a regulatory process.
- Insurance matters: authorising a broker, adviser, or staff member to lodge claims and receive claim updates.
- Supplier accounts: authorising a staff member to open trade accounts or approve purchase limits.
- Privacy-related requests: authorising a person to request, collect, or receive personal information (where the other party needs comfort they’re not breaching confidentiality).
Even within your own business, authority should be clear. For example, if your staff are handling customer information, it’s a good idea to have a clean internal process (and external-facing documents like a Privacy Policy) so everyone understands who can do what, and why.
There’s no single “one size fits all” Authority To Act form in New Zealand. Different organisations have different templates and acceptance criteria.
That said, a good Authority To Act form usually covers the essentials below.
1. Details Of The Principal (You / Your Business)
- Full legal name of the individual or entity
- If it’s a company: the company name and NZBN/company number (where relevant)
- Registered address and contact details
- The role of the signatory (eg director, trustee, partner)
If your business is a company, make sure the person signing is properly authorised under your governance documents (for example your Company Constitution) or by a valid internal resolution.
2. Details Of The Agent (The Person You’re Authorising)
- Full name
- Position or relationship to the business (eg accountant, employee, adviser)
- Contact details
- Identification details if the third party requires it
Many organisations will also want the agent to show ID in-person or complete verification checks. That’s normal, especially for financial institutions or where personal information is involved.
3. Exactly What The Agent Is Allowed To Do
This is the most important part. The authority should be clear, limited, and practical.
For example, you might authorise someone to:
- request information about an account
- update contact details
- submit documents
- collect documents
- negotiate terms (without signing)
- sign specified documents (only if you genuinely want to allow this).
If you leave it vague (eg “do anything they think is necessary”), you may unintentionally give broader authority than you meant to.
4. Limits, Conditions, And Exclusions
If there are things your agent cannot do, write that clearly.
Common limits include:
- spending limits (eg “up to $5,000 per transaction”)
- no authority to open/close accounts
- no authority to sign contracts
- authority is for a specific project only
- authority is only valid if the agent is still employed by you
- require dual approval for major changes.
This is also where you can align your approach with your other legal foundations (like a Service Agreement or internal delegations policy) so there’s no confusion about who can commit the business.
5. Time Period (Start Date, End Date, Revocation)
A well-drafted Authority To Act form should specify:
- when the authority starts
- whether it expires on a particular date
- how you can revoke it (eg written notice, email to a specific inbox)
- what happens if the agent leaves your business.
From a risk perspective, “open-ended” authorities can be a problem, especially if staff change roles or leave. Keeping an expiry date helps you stay in control.
6. Signature Requirements (And Whether A Witness Is Needed)
Depending on the organisation, you may need:
- your signature as principal
- the agent’s signature acknowledging their role
- a witness signature
Some organisations require witnessing to reduce fraud risk. If you’re unsure about what counts as proper witnessing in your situation, getting clarity on who can witness a signature can save you time and avoid rejected paperwork.
An Authority To Act form can be legally effective, but the real question is: what exactly is being authorised, and what will the third party rely on?
Generally, once you authorise an agent to act, the third party may be entitled to rely on that authorisation (as long as it appears valid and the third party isn’t on notice that the authority has been revoked or is limited).
This is why clarity matters. If your agent signs something you intended them to only “discuss”, you can end up with:
- a contract you didn’t expect
- a dispute about whether the business is bound
- internal HR issues (because the agent overstepped)
- financial loss and time spent unwinding the situation.
Practical Tip: Be Careful With Signing Authority
In many businesses, it’s totally normal to delegate communication and admin. But you should be very cautious before delegating the power to sign anything that affects your revenue, liabilities, or long-term obligations.
If you do want a staff member to sign agreements as part of their role, consider supporting that with clear internal documents and onboarding, and make sure your employment paperwork matches the responsibilities. For example, the role and delegations might be reflected in an Employment Contract and internal policies.
What Are The Risks If You Get It Wrong?
Authority To Act forms feel “admin-y”, so it’s easy to treat them like a quick template and a signature.
But if your authorisation is too broad (or unclear), it can create real business risk.
Key Risks To Watch For
- Unintended commitments: your agent might agree to terms, sign a contract, or accept liability you didn’t plan for.
- Privacy breaches: if authority is used to access personal information, mishandling it could raise issues under the Privacy Act 2020.
- Fraud and misuse: broad authority can be misused, especially where there are payments, refunds, or account changes involved.
- Operational confusion: third parties may receive conflicting instructions from different people in your business.
- Difficulty revoking: if you don’t have a clean revocation process, an old authority might keep being relied on.
Scenario: The “Helpful Staff Member” Problem
Imagine your operations coordinator is fantastic and you authorise them to “manage supplier accounts”. A supplier then sends a credit application and terms that include personal guarantees, high interest on overdue accounts, and a broad indemnity clause.
If your authority to act is wide enough (or the supplier thinks it is), your business could be locked into terms you haven’t reviewed. Sorting that out later can be messy and expensive.
This is why it’s smart to treat authority documents as part of your broader contract risk management, along with clear Terms of Trade and signing policies.
How Do You Put An Authority To Act In Place (Without Overcomplicating It)?
The goal is to keep things practical while still protecting your business.
A good approach is to think of your Authority To Act form as a “permission slip” with guardrails.
Step-By-Step Checklist
- Confirm the task: write down what you actually need the person to do (eg “collect keys from the landlord” or “liaise with the bank to update signatories”).
- Check if the third party has their own form: many banks and agencies insist you use their template.
- Limit the scope: authorise only what’s necessary, and consider including a spending limit or “no signing authority” clause if appropriate.
- Set a timeframe: a clear end date (or an “until project completion” trigger) reduces long-term risk.
- Confirm signing rules internally: if you’re a company, make sure the person signing the authority is actually authorised to do so (this might involve a director resolution or referencing governance documents).
- Keep records: save a signed copy in a central place, and track when it expires or is revoked.
- Revoke when needed: if the agent leaves, changes roles, or the task is complete, revoke the authority in writing and keep evidence.
If you’re growing quickly, you can also build this into your broader legal foundations (for example, a governance process for delegations, contract approvals, and document control). This becomes even more important as your team expands and you’re no longer the only decision-maker.
Key Takeaways
- An Authority To Act form is a written authorisation that lets someone deal with specific matters on your behalf with a third party.
- It’s commonly used for banking, leasing, supplier accounts, compliance matters, and situations involving sensitive information.
- The most important part is the scope: be clear about what your agent can and can’t do, especially when it comes to signing contracts or committing to spending.
- Including limits and an expiry date helps reduce risk and keeps your authorisation practical and controlled.
- Depending on the organisation, you may need witnessing, identity checks, or specific wording for the authority to be accepted.
- Authority documents should fit into your overall legal setup (including privacy, contract management, and internal delegations) so your business is protected from day one.
If you’d like help preparing an Authority To Act form (or reviewing the wider contracts and processes it interacts with), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.
