Privacy Act 2020 · Office of the Privacy Commissioner
Sandbox
No
New Zealand does not have a general licensing regime for lending or credit brokering. The Reserve Bank of New Zealand (RBNZ) only regulates entities that accept deposits (Registered Banks and Non-bank Deposit Takers). Pure-play lenders, BNPL providers, and P2P platforms operate without RBNZ authorization, subject only to general commercial, consumer protection, and privacy laws. The Credit Contracts and Consumer Finance Act (CCCFA) was repealed in 2021 and replaced by the Credit Contracts Act 2021, which imposes conduct duties but no licensing.
Which licence do you need?
Your activity
Requirement
Capital
Timeline
Authority
Consumer lending
Unregulated
CCCFA 2021 applies conduct rules; no license needed
—
—
—
SME / commercial lending
Unregulated
Commercial lending is unregulated
—
—
—
Microfinance
Unregulated
No specific regime
—
—
—
Buy-now-pay-later
Unregulated
Excluded from CCCFA 2021 if <6 weeks
—
—
—
P2P lending platform
Unregulated
No specific regime
—
—
—
Credit bureau / scoring
Unregulated
Subject to Privacy Act 2020
—
—
—
Debt collection
Unregulated
Subject to Fair Trading Act
—
—
—
New — what changed recently
2021-11-01Credit Contracts Act 2021 — Repealed CCCFA 2003; removed licensing for credit providers and introduced open-ended credit agreements.
Market-entry checklist
1Register for tax and GSTRegister with Inland Revenue for IRD number and GST if turnover exceeds NZD 60,000.
2Draft compliant credit contractsEnsure all agreements meet the disclosure and fairness requirements of the Credit Contracts Act 2021.
3Implement privacy controlsAdhere to the Privacy Act 2020 regarding the collection and use of personal financial data.
4Avoid deposit-takingDo not accept deposits from the public to avoid triggering RBNZ licensing under the NBDT Act 2013.
This guide is compiled automatically from 0 primary-source documents published by New Zealand's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.