Main laws

New Zealand Act

Harmful Digital Communications Act 2015

The Harmful Digital Communications Act 2015 aims to reduce serious harm caused by online communications and provides victims with a fast...

In forceNew ZealandPlain-English guide5 practical checks

Plain-English explainers, not legal advice. Use the linked official source for section-level detail, and get advice for your situation.

Get legal help

Start here

Quick read

  • The Act affects many businesses because everyday online activity can quickly become a legal issue.
  • If your business publishes content about people or hosts user posts, you may face complaints about harmful, false, threatening, offensive, harassing or privacy-invasive content.

Likely relevant if

  • Businesses that operate websites, apps, forums or marketplaces allowing user-generated content
  • Online retailers and service providers using social media, messaging or review platforms
  • Media, marketing and content businesses publishing digital material about individuals

Check first

  • Do not post digital communications intended to cause harm when offence elements are met
  • Do not post intimate visual recordings without consent or with reckless disregard for consent
  • Comply with any court order under the Act unless you have a reasonable excuse or obtain a variation

What this Act does

The Harmful Digital Communications Act 2015 aims to deter, prevent and reduce harm caused by digital communications to individuals. It provides victims with a fast and effective way to seek redress.

For businesses, this means online conduct can have legal consequences beyond reputation damage. The Act defines harm as serious emotional distress and sets out 10 communication principles that guide complaint assessments and court decisions.

Practical sense check

  • The Act applies to emails, messages, posts, comments, images, videos and in-app communications
  • Complaints about online abuse or privacy-invasive content may be legal issues, not just moderation matters
  • The Act protects individuals, so complaints usually involve identifiable persons
  • Determine if your business is posting content itself or hosting user-generated content

Who is most affected and when the Act matters

The Act is most relevant where a business communicates online about identifiable people or provides a platform for others to do so.

Examples include retailers with social media pages, SaaS companies with user forums, marketplaces with seller reviews, and schools with student reporting channels. These businesses may receive complaints about harmful digital communications.

Practical sense check

  • Customer review platforms and directories
  • Community forums and membership portals
  • Social media pages and direct messaging channels
  • Marketplaces where buyers and sellers interact
  • Education and youth-focused digital platforms

The communication principles your team should know

The Act sets out 10 communication principles that guide what is considered harmful digital communication. These principles help businesses understand what content may breach the Act.

In summary, digital communications should not disclose sensitive personal facts, threaten or intimidate, be grossly offensive, be indecent or obscene, harass, make false allegations, breach confidence, encourage harmful behaviour, or be used for denigration or incitement.

Practical sense check

  • Avoid posting sensitive personal information about customers, workers or competitors
  • Do not make public accusations without verifying truth, context and legal risks
  • Do not encourage others to contact or harass an individual
  • Immediately escalate complaints involving threats, harassment or intimate content
  • Ensure moderation policies clearly ban abusive, threatening and privacy-invasive content

How complaints, the Approved Agency and court process work

The Act establishes an Approved Agency to receive, assess and investigate complaints about harmful digital communications. The Agency uses advice, negotiation and mediation to resolve complaints where possible.

The Agency can decline or stop investigating complaints that are trivial, vexatious or outside the Act’s scope. If unresolved, the Agency may recommend applying to the District Court for orders such as takedown, correction or apology.

The Court considers factors like harm, purpose, context, spread, truth, public interest, conduct of parties, and practicality when deciding on orders.

If you host user content, the notice and counter-notice process is critical

Sections 23 to 25 provide important protections for businesses hosting user-posted content. An online content host can avoid civil or criminal liability for specific content by following the statutory notice and counter-notice process.

This process requires the host to receive a valid notice of complaint, notify the content author, and allow the author to respond with a counter-notice within 48 hours. If the author consents to removal or does not respond, the host must remove the content promptly.

If the author objects in a valid counter-notice, the host leaves the content in place and informs the complainant. Following this process carefully is essential to gain statutory protection.

Privacy, identity disclosure and record-keeping

The Act restricts disclosure of personal information about complainants and authors during the complaint process. Disclosure is generally not permitted except by court order.

While the Act does not impose a strict record-keeping obligation, keeping detailed records of complaints, notices, counter-notices, contact attempts and takedown actions is a practical step to demonstrate compliance.

Documents to keep in order

  • Use a standard complaint intake form capturing all required notice details
  • Record whether the complainant consents to disclosure of their identity
  • Keep screenshots, URLs, account identifiers and timestamps of content
  • Document every attempt to contact the content author
  • Restrict staff authority to disclose identities without legal advice or court order

Common questions

What types of digital communications does the Act cover?

The Act covers emails, messages, posts, comments, images, videos and in-app communications that may cause serious emotional distress.

What is the role of the Approved Agency under the Act?

The Approved Agency receives and investigates complaints about harmful digital communications and tries to resolve them through advice, negotiation or mediation before court involvement.

How can an online content host avoid liability for harmful user content?

By following the statutory notice and counter-notice process in sections 23 to 25, including timely removal of content when required.

Are businesses required to keep records of complaints and takedown actions?

While not a strict legal obligation, keeping detailed records is a practical step to demonstrate compliance with the Act.

What penalties apply for offences under the Act?

Offences can result in fines up to $50,000 for individuals and $200,000 for bodies corporate, depending on the specific offence.

Related topics

How Sprintlaw can help