AI Agent Development for New Zealand Businesses

Meeting the Privacy Commissioner's expectations

The Privacy Commissioner's guidance on generative AI translates into concrete design work for an agent project:

• Senior leadership sign-off on the use case before rollout
• A privacy impact assessment covering what the agent reads, stores and sends
• Transparency with customers and staff about when they are dealing with AI
• Accuracy checks and a human review before acting on outputs that could cause harm
• Settings that stop model providers retaining or reusing your personal information
• Engagement with Māori about potential impacts where the use case affects them

Data location, te reo Māori and channels

An Australian cloud region is often easier to justify under IPP 12 than US-hosted APIs, and some providers now offer New Zealand regions; we confirm that the models you need are available before choosing. Agent-sent marketing emails and texts must follow the Unsolicited Electronic Messages Act 2007, and actions such as payments, refunds or record changes wait for human approval.

Agents also need to handle everyday New Zealand English, which includes te reo Māori words, greetings and place names. We make sure macrons survive every step, so Taupō or Whangārei are never mangled in emails or CRM records, and we respect Māori data sovereignty principles where an agent handles data about Māori people or communities.