Main laws

New Zealand Act

Civil Aviation Act 2023

The Civil Aviation Act 2023 is New Zealand's main civil aviation framework law.

In forceNew ZealandPlain-English guide10 practical checks

Plain-English explainers, not legal advice. Use the linked official source for section-level detail, and get advice for your situation.

Get legal help

Start here

Quick read

  • The Civil Aviation Act 2023 is the main framework law for New Zealand's civil aviation system.
  • It sets the legal structure for aviation participants, the Civil Aviation Authority, the Director of Civil Aviation, aircraft registration, aviation documents, medical...

Likely relevant if

  • Commercial drone operators
  • Aircraft operators, including charter, scenic flight and flight training businesses
  • Aircraft maintenance and aviation support businesses

Check first

  • Aviation participants must meet the Act's general requirements and comply with applicable civil aviation rules.
  • Aircraft that fall within the registration regime must be registered.
  • Pilots-in-command have statutory duties, including duties in emergencies.

Answer first

The Civil Aviation Act 2023 is New Zealand's principal civil aviation law. It sets the legal framework for aviation participants, the Civil Aviation Authority, the Director of Civil Aviation, aircraft registration, aviation documents, medical certification, accident and incident notification, aviation security, airports, and parts of international aviation law.

For most businesses, the practical point is straightforward. If you operate aircraft or drones, provide aviation services, work in security-controlled airport areas, or rely on aviation approvals, this Act is likely part of your compliance base. You will usually need to read it together with the civil aviation rules that apply to your operation.

Practical sense check

  • Check whether your business is an aviation participant under the Act and related rules
  • Identify any aviation documents, registrations or approvals your business or staff need
  • Review who in your business is responsible for emergency and safety event escalation
  • Check whether relevant staff need current medical certification
  • Check whether your business is a DAMP operator
  • Update old references to the Civil Aviation Act 1990 in manuals, templates and contracts

Who is in scope

This Act matters most to businesses directly involved in aviation, but it can also affect businesses that work at airports or need access to security-controlled areas. Many businesses first encounter it when they start charging for flights, begin commercial drone work, apply for an aviation document, or hire staff into regulated aviation roles.

It can also become relevant as a business grows. A simple operation can move into a more regulated category once you add staff, operate in more complex airspace, use larger aircraft, expand services, or start international activity.

Key points

  • Drone businesses doing paid filming, surveying, mapping or inspections
  • Charter, scenic flight and flight training operators
  • Aircraft maintenance and aviation support businesses
  • Airport operators
  • Ground service providers and contractors working in secure airport areas
  • Businesses whose staff need aviation documents or medical certification
  • Operators involved in scheduled or non-scheduled international air services

What the Act covers

The Act is broad. It covers the roles of the Civil Aviation Authority and the Director of Civil Aviation, general requirements for aviation participants, duties of pilots-in-command, aircraft registration, civil aviation records, general aviation offences, accident and incident notification, rule-making powers, aviation documents, medical certification, drug and alcohol management plans and testing, aviation security, international aviation, and airports.

That does not mean every operating detail is in the Act itself. The Act creates the legal framework and gives power for civil aviation rules to deal with many technical and operational requirements. A business should treat the Act as the starting point, not the whole answer.

Practical sense check

  • Use the Act to identify the legal framework that applies to your business
  • Use the relevant civil aviation rules to confirm day-to-day operating requirements
  • Check whether your approvals have conditions attached
  • Check whether your staff roles trigger separate certification or security requirements
  • Review both safety and security obligations, not just flight operations

Main trigger points for businesses

Most businesses do not need to read the whole Act at once. They usually hit a trigger point first. Common examples include buying or operating an aircraft, starting commercial drone work, applying for or renewing an aviation document, employing staff who need medical certification, operating from an airport, or dealing with an accident, incident or emergency.

Another trigger point is change. If your business moves from occasional work to regular paid operations, adds new aircraft, enters controlled or restricted environments, or starts international services, your compliance position may change quickly.

In practice

  • Starting a paid drone or aircraft operation
  • Applying for a new aviation document or renewing an existing one
  • Registering an aircraft
  • Hiring staff into regulated aviation roles
  • Beginning work in airside or other security areas
  • Responding to an accident, incident or emergency
  • Scaling into international air services or airport-related infrastructure activity

General requirements and operational duties

Part 2 starts with general requirements for aviation participants. It also includes duties of pilots-in-command, including duties in emergencies arising in flight and emergencies not arising in flight. The Act separately refers to failure to notify an emergency as a breach of civil aviation legislation and includes provisions about identifying the pilot-in-command.

For a business owner, this means operational responsibility should be clear before a flight or aviation activity starts. Your manuals, role descriptions and reporting lines should match the legal structure, especially where more than one person or entity is involved in an operation.

Practical sense check

  • Define who is responsible for each regulated aviation activity
  • Make sure pilot-in-command responsibilities are clear in practice
  • Set an emergency escalation process for both in-flight and ground events
  • Keep records that identify the relevant pilot-in-command and operator
  • Train staff not to treat emergency reporting as optional

Aircraft registration and records

The Act continues the New Zealand Register of Aircraft and includes a requirement to register aircraft. It also provides for Civil Aviation Records and information services. These are not just administrative topics. Registration and records often sit behind financing, insurance, maintenance tracking, operational approvals and enforcement risk.

If your business owns, leases, operates or manages aircraft, check early whether registration requirements apply and who is responsible for keeping records accurate and current. Do not assume someone else in the chain is handling it unless that responsibility is clearly allocated and verified.

Documents to keep in order

  • Check whether each aircraft must be registered
  • Confirm who is responsible for registration filings and updates
  • Keep ownership, lease and operational records aligned
  • Make sure maintenance and operational records can be produced when needed
  • Review insurance and finance documents for registration-related obligations

Aviation documents in practice

Part 4 is one of the most commercially important parts of the Act. It covers applications for aviation documents, grant or renewal, conditions, duration, appeal rights, the fit and proper person test, disclosure of prejudicial information, rights of affected persons, and adverse decisions by the Director.

The Act also gives the Director powers to suspend, revoke, amend or impose conditions on aviation documents. There is also a specific provision dealing with suspension or revocation where prescribed fees, charges or levies are unpaid. For a business, that means document management is not just a filing task. It is core operational risk management.

Documents to keep in order

  • List every aviation document your business and key staff rely on
  • Track renewal dates and any conditions attached to each document
  • Check whether fit and proper person issues need to be disclosed
  • Make sure fees, charges and levies are paid on time
  • Have a plan for responding quickly if the Director proposes an adverse decision

Medical certification

The Act includes a separate medical certification regime. It covers medical certification and offences for acting without a required medical certificate, making fraudulent, misleading or false statements to obtain a medical certificate, and failing to disclose medical information.

Businesses should not treat this as a private issue for individual staff alone. If a role depends on a current medical certificate, the business should have a lawful process for checking currency, managing expiry risk, and dealing with any operational consequences if a certificate is suspended, restricted or revoked.

Practical sense check

  • Identify which roles require medical certification
  • Check certificate currency before assigning regulated duties
  • Set reminders for expiry and renewal timing
  • Avoid rostering assumptions where certification status is uncertain
  • Keep internal processes ready for suspension, restriction or revocation issues

Accidents, incidents and safety events

The Act includes a duty to notify accidents and incidents to the CAA, and a related duty on the CAA to notify accidents and incidents to TAIC. It also creates an offence for failure to notify an accident or incident. The Act separately includes offences for operating aircraft in a careless manner, dangerous activity involving aircraft, an aeronautical product or an aviation-related service, and communicating false information affecting safety.

For businesses, the practical lesson is to remove guesswork. Staff should know what kinds of events must be escalated, who decides whether notification is required, who contacts the regulator, and how records are preserved after an event.

Practical sense check

  • Create a written accident and incident escalation procedure
  • Nominate a responsible contact for urgent notifications
  • Train staff to escalate safety events immediately
  • Preserve flight, maintenance and communication records after an event
  • Do not allow false, incomplete or informal safety reporting

Drug and alcohol management plans

The Act contains a dedicated subpart on drug and alcohol management plans and testing. It states that a DAMP operator must develop a DAMP. It also covers random testing by a DAMP operator, Director testing, what happens if a worker refuses consent or a test result is not negative, tampering, and limits on the use of test results in certain prosecutions.

If your business falls within this framework, the issue is wider than operations. It can affect employment documents, privacy handling, manager training, incident response and recordkeeping. Scope and implementation should be checked carefully against the Act and the applicable rules.

Practical sense check

  • Check whether your business is a DAMP operator
  • Develop and maintain a DAMP if required
  • Train managers on consent, refusals and non-negative result processes
  • Store testing records securely and consistently
  • Align workplace policies with operational testing requirements

Airport security and access

Part 5 deals with aviation security. It covers security designated aerodromes and navigation installations, airside security areas, landside security areas, entry requirements, evidence of identity and authority, security checks, aviation security service providers, searching powers, powers relating to vehicles and items, and offences for unauthorised presence, obstruction and related conduct.

This can affect more than airlines. Small businesses may be caught if staff, contractors, vehicles, tools or goods need to move through security-controlled spaces. If you work at an airport, security compliance should be built into onboarding, access control and contractor management.

Practical sense check

  • Map which staff and contractors need access to security areas
  • Check identity and authority requirements before access is given
  • Train staff on search, screening and access procedures
  • Review vehicle and goods movement through secure areas
  • Do not allow unauthorised people into controlled areas

International services, CORSIA and airports

The Act also covers scheduled international air service licensing, authorisation for certain non-scheduled commercial international flights, international air carriage competition, and the carbon offsetting and reduction scheme for international aviation, known as CORSIA. For eligible New Zealand operators, the Act includes obligations around contact details, emissions monitoring plans, emissions reports, offsetting calculations, cancellation reports and verification.

Part 7 deals with airports. It includes airport registration, operation, charges, consultation on capital expenditure plans and spatial plans, airport bylaws, and regulatory airport spatial undertakings. These parts matter most to larger operators, international businesses and airport operators, but they can also affect suppliers and commercial users dealing with airport infrastructure and charges.

Practical sense check

  • Check whether your international service needs a licence or authorisation
  • Confirm insurance and return obligations for international services where relevant
  • Check whether your business is an eligible New Zealand operator for CORSIA purposes
  • Review airport charging and consultation processes if you operate an airport
  • Check whether airport bylaws or spatial undertakings affect your project or operations

Documents and conduct to review now

Aviation compliance often turns on documents, approvals and disciplined reporting. A small operator should be able to show what approvals it holds, what conditions apply, who is responsible for regulated decisions, and how it handles emergencies, safety events and security access.

The Act repealed the Civil Aviation Act 1990. That makes it worth checking whether your contracts, manuals, policies, forms and training materials still refer to the old Act or to outdated processes carried over from it.

Documents to keep in order

  • Current aviation documents and renewal dates
  • Aircraft registration details where relevant
  • Medical certification records for relevant staff
  • Accident and incident escalation procedure
  • DAMP and testing records where applicable
  • Airport security access records and training logs
  • Contracts, manuals and policies updated to refer to the Civil Aviation Act 2023

Dates and status

The Civil Aviation Act 2023 is a public Act and is in force. It received Royal assent on 5 April 2023. The current consolidated legislation is the version in force as at 19 May 2026.

The Act repealed the Civil Aviation Act 1990. It also provides for the Airport Authorities Act 1966 to be repealed on the fifth anniversary of the date on which section 487 comes into force. If timing matters for a transaction, approval, airport issue or compliance step, check the current official version and any related rules before acting.

Common questions

Does the Civil Aviation Act 2023 apply to drone businesses?

Often, yes. If your business uses drones commercially, this Act is likely part of your compliance framework. The exact requirements usually depend on the civil aviation rules and any aviation documents or approvals that apply to your operation.

Do I only need to read the Act itself?

Usually not. The Act sets the framework, but many practical requirements are set out in civil aviation rules made under it. You should check both the Act and the rules that apply to your aircraft, operation, staff and location.

What is an aviation document in practice?

The Act contains a full regime for applying for, granting, renewing, conditioning, suspending and revoking aviation documents. In practice, many aviation activities depend on the right document being in place, current and complied with.

Does the Act deal with accidents and incidents?

Yes. The Act includes a duty to notify accidents and incidents to the CAA, and a related duty on the CAA to notify TAIC. Businesses should have a clear internal escalation process so staff know when an event must be escalated and who is responsible for acting.

When do drug and alcohol obligations matter?

The Act includes a drug and alcohol management plan and testing framework for DAMP operators. If your business falls within that category, you should check the Act and the related rules carefully and make sure your employment, privacy and operational processes line up.

What should airport-based businesses check first?

Start with access and security. If staff, contractors, vehicles or goods need to move through airside or other security areas, check identity, authority, search and access requirements, and train staff before they start work.

Related topics

How Sprintlaw can help