Main laws

New Zealand Act

Health and Disability Commissioner Act 1994

The Health and Disability Commissioner Act 1994 is the main New Zealand law that sets up the Health and Disability Commissioner, the...

In forceNew ZealandPlain-English guide8 practical checks

Plain-English explainers, not legal advice. Use the linked official source for section-level detail, and get advice for your situation.

Get legal help

Start here

Quick read

  • The Health and Disability Commissioner Act 1994 matters to businesses because it creates the complaints and investigation framework that sits behind consumer rights in New Zealand...
  • If your business provides health services or disability services, this Act affects how complaints can be made, how the Commissioner can investigate, and how your business should...

Likely relevant if

  • Private healthcare clinics, including medical, dental, physiotherapy, counselling and diagnostic providers
  • Disability support providers, including care, support and independence services
  • Ambulance service providers offering services to the public

Check first

  • If you provide health or disability services, have systems that support the rights in the Code of Health and Disability Services Consumers’ Rights.
  • Obtain and document informed consent for health care procedures in a way that matches the Code’s requirements.
  • Respond appropriately to complaints and be prepared for matters to be referred to the Commissioner, an advocate or another agency.

What this Act does

The Health and Disability Commissioner Act 1994 sets up New Zealand’s framework for protecting the rights of health consumers and disability services consumers. Its stated purpose includes promoting and protecting those rights, securing the fair, simple, speedy and efficient resolution of complaints, appointing the Health and Disability Commissioner, establishing an advocacy service, and providing for a Code of Health and Disability Services Consumers’ Rights.

For business owners, the key point is that this Act is not just about public sector institutions. It creates a practical pathway for complaints about private and community-based providers too. It also gives the Commissioner powers to assess complaints, investigate possible breaches, require information and documents, and make recommendations. If your business deals directly with patients, clients, residents or service users, this Act should shape your frontline systems.

Practical sense check

  • Check whether your business provides health services, disability services, or both
  • Identify who in your business is responsible for complaints, consent and consumer information
  • Make sure staff understand that consumer rights issues can escalate outside your internal process
  • Review whether your business has a documented pathway for responding to Commissioner enquiries

Who is covered and who should pay close attention

The Act uses broad definitions. It covers health care providers and disability services providers. The definition of health care provider includes people in charge of providing health care services in compliance with the Health and Disability Services (Safety) Act 2001, controlling authorities of certain hospitals, health practitioners, public ambulance providers, School Dental Service personnel carrying on dentistry, and other people who provide or hold themselves out as providing health services to the public.

Disability services are also defined broadly. They include goods, services and facilities provided to people with disabilities for care, support or promoting independence, and services related or incidental to that care, support or independence. This means many providers outside a traditional clinic model may still be in scope. If your business advertises support, treatment, counselling, rehabilitation, care coordination or similar services, you should not assume you are outside the regime.

Key points

  • Likely in scope: GP clinics, dental practices, physio clinics, counselling services, diagnostic providers
  • Likely in scope: disability support services, supported living providers, care and independence services
  • Likely in scope: ambulance providers and some treatment centre operators
  • Potentially in scope: businesses that market health-related services to the public even if they are not a hospital or large institution

Everyday trigger points for small providers

Most businesses will not deal with this Act only when a formal investigation starts. The real trigger points are everyday moments where consumer rights can be affected. Common examples include obtaining consent for treatment, explaining options and risks, handling a complaint from a patient or family member, responding to a request for help from an advocate, or dealing with concerns about staff conduct.

The Act also treats action broadly. In relation to a provider, action includes a failure to act and includes any policy or practice. That matters because complaints are not limited to one-off mistakes. A consumer may complain about a recurring process problem, such as poor information practices, weak complaint handling, or a consent form that does not match what staff actually say in appointments.

Practical sense check

  • Before treatment: confirm how consent will be obtained and recorded
  • At intake: give consumers clear information about rights and complaints options
  • After an incident: preserve notes, communications and relevant documents
  • When a complaint is raised: decide whether it can be resolved early or needs escalation
  • When using contractors or agents: check whether your systems cover their conduct too

How complaints, advocacy and investigations work in practice

The Act creates several pathways once a concern is raised. There is a general right to make complaints. Complaints may be referred to the Commissioner, assessed, referred to agencies or persons in the health or disability sector, referred to certain statutory officers, or referred to an advocate. The Act also provides for the Commissioner to decide to take no action or no further action in some cases, and for the Commissioner to investigate breaches.

The advocacy service is an important practical feature. Advocates are there to support consumers, promote awareness of the Code, help with complaint resolution, and assist with informed consent issues. For providers, this means an early complaint may come through an advocate rather than directly through a lawyer or court process. A constructive response at that stage can matter.

If the matter becomes an investigation, the Commissioner can notify the complainant and provider, gather information, and move toward recommendations or further proceedings.

Core obligations and practical responsibilities

This Act does not work as a simple checklist statute for providers, but it creates clear practical responsibilities. Because the Code is prescribed by regulations under the Act, providers need systems that support consumer rights in day-to-day service delivery. The Act also expressly refers to informed consent and gives advocates functions connected to helping consumers understand procedures and complaints options.

Another major responsibility is co-operation. During an investigation, the Commissioner may require information, documents or things, and may summon and examine people on oath. Obstructing, refusing to comply without reasonable excuse, or giving false or misleading information can be an offence. Providers therefore need a disciplined response process that protects confidentiality where applicable but still deals properly with lawful requests.

Why staff conduct can become the business’s problem

Section 72 is one of the most important business provisions in the Act. It says that, subject to a defence, things done or omitted by an employee are treated as done or omitted by the employing authority as well. Similar rules apply to agents and members in certain circumstances. In other words, a complaint about one practitioner, support worker or contractor may expose the business itself.

The defence is practical rather than automatic. An employing authority may defend proceedings by proving it took reasonably practicable steps to prevent the employee from doing or omitting the relevant thing, or things of that description. That means your business should be able to show more than a policy sitting in a folder. Training, supervision, complaint escalation, consent procedures, audits and corrective action all help show preventative steps were actually taken.

Practical sense check

  • Train staff on consumer rights, consent and complaint handling
  • Supervise new or high-risk staff and trainees appropriately
  • Use written procedures for information-giving and consent
  • Audit whether practice matches policy
  • Document corrective action after incidents or near misses
  • Review contractor and agency arrangements, not just employee roles

Records, evidence and confidentiality

Good records are central under this Act. The Commissioner may require information, documents and things relevant to an investigation, and may summon people for examination. If your records are incomplete, inconsistent or hard to retrieve, your business may struggle to explain what happened. That can turn a manageable complaint into a more serious regulatory problem.

The Act also recognises privileges and some limits on compulsory disclosure. People generally have the same privileges as witnesses in court, and there are protections where disclosure would breach secrecy or non-disclosure obligations imposed by legislation, with stated exceptions. There are also special rules about matters that need not be disclosed for public interest reasons in certain certified cases. In practice, providers should not guess.

If a request raises privacy, secrecy or privilege issues, get legal advice quickly while still preserving and organising the material requested.

Operating checklist for health and disability businesses

If you run a health or disability service, the safest approach is to treat this Act as part of your operating framework, not just a complaints law. The businesses that cope best with complaints usually have simple, repeatable systems that staff can follow under pressure. That includes consumer-facing information, internal escalation rules, and a clear owner for regulatory correspondence.

Small providers do not need a large compliance department, but they do need discipline. A one-clinic practice, home-based support service or specialist provider can still face a complaint to the Commissioner. The question is whether your business can show respectful treatment, informed consent, proper records and a genuine effort to resolve issues fairly and quickly.

Sense check

  • Publish a clear complaints pathway for consumers
  • Make the Code and consumer rights information easy to access
  • Use a consistent informed consent process suited to your services
  • Keep records that explain decisions, discussions and treatment steps
  • Nominate a person to manage Commissioner or advocate communications
  • Review whether your staff, agents and contractors are covered by the same standards
  • Seek advice early if a complaint suggests systemic issues or possible formal investigation

Common questions

Does this Act apply only to hospitals and large providers?

No. The Act reaches well beyond hospitals. It applies to a range of health care providers and disability services providers, including health practitioners, ambulance providers, and other people who provide or hold themselves out as providing health services to the public.

Can a consumer complain even if the issue seems minor?

Yes. The Act provides a general right to make complaints, and complaints can be assessed, referred, resolved through advocacy, or investigated. Small issues can still become formal matters if they suggest a possible breach of consumer rights or a wider risk.

Why does informed consent matter so much under this Act?

The Act defines informed consent and links it to the Code of Health and Disability Services Consumers’ Rights. Advocates also have functions aimed at helping consumers understand procedures and ensuring consent is obtained and informed. For providers, consent is a core operational risk area.

Can my business be responsible for what a staff member did?

Often yes. The Act says acts or omissions by employees, and in some cases agents or members, can be treated as acts or omissions of the provider as well. A provider may have a defence if it can prove it took reasonably practicable steps to prevent that conduct.

Related topics

How Sprintlaw can help