Skip to content

Penalties for Non-Compliance in New Zealand

A complete guide to non-compliance penalties in New Zealand, with real enforcement risks across tax, employment, privacy, AML, and corporate law.

Logan Jackonis
Logan JackonisHead of Services & Operations, Commenda
Fact Checked January 23, 2026|18 min read
penalties-non-compliance-new-zealand

Key Highlights

  • Tax penalties can compound fast. Inland Revenue (IRD) late-payment penalties commonly begin with 1% the day after the due date, 4% on day 7, and 1% monthly on the remaining unpaid tax in many cases.
  • Late filing penalties apply across several tax obligations, including employment information, and specific GST return late-filing penalties depend on the GST accounting basis.
  • Tax shortfall penalties can be severe for aggressive positions or evasion. IRD outlines categories such as abusive tax positions (including a 100% shortfall penalty).
  • Companies Office penalties include late filing fees for financial statements and infringement penalties (including the ability to issue a $7,000 penaltyper director for failing to file audited financial statements in applicable cases).
  • Immigration non-compliance can trigger infringement notices (typically NZD $1,000 for individuals or NZD $3,000 for companies per infringement) and can also lead to stand-downs from supporting visas and loss of accreditation.
  • More serious immigration offences can carry very high criminal penalties, including up to 7 years’ imprisonment and/or a fine of up to $100,000 for certain offences under the Immigration Act 2009.
  • Health and safety (HSWA 2015): the most serious category (reckless conduct) can attract penalties up to $3 million for a body corporate, with prison terms for individuals.
  • Consumer law penalties are rising. New Zealand announced major increases to Fair Trading Act penalties, with MBIE describing new maximums, such as $5 million for body corporates (and alternative calculations, such as 3× commercial gain).

New Zealand is widely regarded as a stable, well-regulated place to do business, with clear laws and practical regulatory guidance. This can create a false sense of security for overseas businesses. In reality, compliance obligations are strictly enforced, penalties escalate quickly, and directors and officers may face personal exposure.

For international companies operating in New Zealand, non-compliance can lead to far more than a single fine, including compounding charges, regulatory action, licence loss, public enforcement, and, in serious cases, criminal liability.

This guide outlines the key penalties for non-compliance across major regulatory areas in New Zealand, explains how enforcement typically works, and highlights practical ways to reduce risk without slowing business growth.

How enforcement works in New Zealand (what global businesses should expect)

New Zealand enforcement is generally predictable. Regulators tend to publish guidance, articulate expectations, and (in many regimes) escalate from warnings to infringement notices to court action when they see repeated or serious non-compliance.

Across most compliance areas, enforcement typically follows this structure:

  1. Detection through filings, audits, complaints, proactive monitoring, or data-matching
  2. Information requests (documents, records, explanations)
  3. Administrative action (late penalties, infringement notices, compliance notices, enforceable undertakings)
  4. Escalation to court for serious, repeated, intentional, or harmful breaches
  5. Public outcomes (media releases, published decisions) that can cause reputational harm

New Zealand’s regulators also share a common theme: they care about whether your organisation has reasonable systems in place to comply, especially in areas such as privacy, AML/CFT, and health and safety.

Penalty Types in New Zealand: What Businesses Face

When people search “penalties for non-compliance in New Zealand,” they often mean “what’s the maximum fine?” That matters, but it’s only one part of the real risk picture. Penalties and consequences often include:

Monetary penalties

  • Fixed penalties (e.g., tax late-filing penalties)
  • Compounding late-payment penalties (tax)
  • Infringement fees (immigration/employment/corporate)
  • Court-ordered pecuniary penalties (AML/CFT, financial markets conduct)

Operational restrictions

  • Visa support stand-downs and loss of accreditation for employers under immigration infringements
  • Removal from the Companies Register where statutory obligations are not met

Remediation and corrective directions

  • Privacy compliance notices (require you to do/stop doing specific things)
  • HSWA court orders (e.g., training, systems improvements) are common in sentencing practice (WorkSafe outlines offence/penalty categories)

Reputational damage

  • Public enforcement announcements from regulators like the Commerce Commission and FMA

For many companies, reputational and operational impacts cost more than the fine.

The Cost of Tax Non-Compliance in New Zealand

Tax is the most universal compliance category: if you operate in New Zealand, you will almost certainly interact with IRD. Key areas include PAYE/employment information, GST, corporate income tax, withholding tax, and (for some groups) cross-border tax issues.

1. Late payment penalties: why they compound quickly

IRD outlines standard late-payment penalty mechanics. A common structure includes:

  • 1% penalty the day after the due date
  • 4% penalty on day 7 (on remaining tax, including penalties)
  • 1% monthly penalty on remaining unpaid amounts in many cases

This design is meant to incentivise fast resolution. In practice, it means small delays can become disproportionately expensive when you’re dealing with large tax bills or recurring liabilities.

2. Late filing penalties: PAYE/employment information and GST return penalties

IRD provides specific guidance on late filing penalties, including:

  • Employment information late filing penalty of $250 (noting it can be a single monthly penalty, regardless of how many times you fail within that month).

For GST returns, IRD’s penalty and interest guide states that late-filing penalties can depend on the GST accounting basis. For example, the IRD guide lists:

  • Payments basis: $50
  • Invoice basis: $250
  • Hybrid basis: $250

If you’re a global business managing payroll and GST alongside multiple jurisdictions, these penalties can stack across multiple periods and become a significant compliance cost even before any audit adjustment.

3. Shortfall penalties: the “real” cost of incorrect positions

The most expensive tax compliance outcomes often come from shortfall penalties applied when a taxpayer’s position results in underpaid tax. IRD outlines categories of shortfall penalties and their logic. 

For example, IRD explains that for an abusive tax position, the penalty is 100% of the resulting tax shortfall.

IRD also publishes technical consultation material on evasion and similar acts, highlighting that evasion involves intention and specific mental elements (not mere carelessness).

Why this matters for global businesses: cross-border structures, transfer pricing issues, permanent establishment risks, and misunderstandings about withholding taxes are common triggers of disputes. Even if you don’t face the highest penalty category, the cost of audit defence, documentation, and remediation can be high.

4. Practical “tax risk multipliers” for international businesses

If you want to reduce penalty exposure, focus on the patterns that drive IRD enforcement:

  • Recurring late payment (compounding penalties)
  • Recurring late filing across PAYE/employment information or GST
  • Poor documentation and controls (making it hard to defend positions)
  • Aggressive positions that could be seen as abusive (shortfall penalties)

Corporate compliance: Companies Office filings, director exposure, and removal risk

New Zealand’s corporate register is transparent and actively maintained. While many obligations are relatively simple, non-compliance can create director-level issues and, in some cases, lead to the Registrar removing the company from the register.

– Financial statements: late fees and infringement penalties

The Companies Office provides clear information on fees and penalties for financial statements filed under the Companies Act, where applicable. It lists late fees such as:

  • $25 for financial statements filed up to 25 working days late
  • $100 for financial statements filed more than 25 working days late

For some failures, the Companies Office also notes it can issue an infringement penalty of $7,000 to each director for failing to register audited financial statements (where required).

This is important because it’s not only a company-level cost; it can attach to individuals.

– Company annual returns and removal from the register

The Companies Office explains annual return obligations and what happens if you do not meet them.

Separately, it explains that the Registrar may remove a company from the Companies Register if it has failed to comply with its obligations under the Companies Act 1993.

Why this matters: if a company is removed, it can create downstream issues for bank accounts, contracts, IP ownership, and the ability to sue or be sued. Restoration can be costly and time-consuming.

What corporate non-compliance often looks like in real life?

For global businesses, Companies Office problems usually don’t come from “not caring.” They come from:

  • unclear responsibility between HQ and local directors
  • missed filing months or changes in filing requirements
  • corporate changes (share transfers, director changes, registered office updates) not being lodged promptly
  • reliance on one person’s inbox or a spreadsheet calendar

This is exactly the kind of compliance risk that scales with your growth.

Privacy and data compliance: Privacy Act 2020 penalties and the “hidden” risk

New Zealand’s privacy regime is generally viewed as moderate compared with GDPR-style jurisdictions because it lacks the GDPR’s scale of administrative fines. But privacy non-compliance still carries real penalties and reputational risk, especially around breach handling and regulator directions.

– Notifiable privacy breaches and the $10,000 offence

Under the Privacy Act 2020, failing to notify the Privacy Commissioner of a notifiable privacy breach (without reasonable excuse) is an offence punishable by a fine of up to $10,000.

The Office of the Privacy Commissioner also explains Privacy Act changes, highlighting the new breach notification regime and the Commissioner’s ability to issue compliance notices.

– Compliance notices: why they matter more than the $10k fine

The Commissioner’s ability to issue compliance notices is operationally important. A compliance notice can require an organisation to do something (or stop doing something) to meet obligations.

For a global business, a compliance notice can force:

  • changes to collection/consent flows
  • vendor handling changes
  • security upgrades
  • retention policy implementation
  • cross-border transfer controls

Even if monetary penalties appear smaller than those under GDPR, the operational costs and reputational risks can be significant, particularly if the incident affects customers.

– Practical privacy risk areas for international companies

Most privacy failures cluster around the same themes:

  • weak access controls and monitoring
  • poor incident response (late or incomplete breach assessment/notification)
  • vendor/processor gaps (SaaS tools, marketing automation, support tooling)
  • collecting more data than required or retaining it too long

The best way to reduce privacy enforcement risk is to treat privacy as a systems problem, not a policy problem.

Employment law non-compliance

Employment compliance is a frequent area of enforcement for growing companies, particularly those hiring quickly or using contractors.

New Zealand’s Ministry of Business, Innovation and Employment (MBIE) provides information on enforcement tools and penalty levels. It notes that MBIE can take action for serious breaches of minimum entitlement provisions, seeking:

  • a declaration that a breach was serious
  • penalties of up to $50,000 against an individual, or for companies, the greater of $100,000 or 3 times the financial gain

It also references other enforcement tools, such as penalties up to $10,000 for individuals or $20,000 for companies in certain contexts, as well as arrears and enforceable undertakings/improvement notices.

What triggers “serious breach” exposure in practice

“Serious breach” enforcement is usually about patterns and harm, such as:

  • deliberate or repeated underpayment
  • record-keeping failures that conceal underpayment
  • exploitation-type conduct (especially involving vulnerable or migrant workers)
  • Repeated non-compliance after warning or investigation

For global companies, the common triggers are less dramatic but still risky:

  • misclassifying employees as contractors
  • failing to keep proper wage/time records
  • not meeting minimum entitlements due to payroll setup errors
  • not updating rates/entitlements when laws change

Why employment penalties don’t stop at the fine

Even where monetary penalties apply, the total exposure often includes:

  • arrears/backpay
  • interest and remediation costs
  • legal costs and settlement expenses
  • reputational damage (especially if the Labour Inspectorate becomes involved)

The most effective risk reduction is to ensure payroll and entitlement calculations are correct by design, not “checked later.”

Immigration non-compliance

If your business hires migrants, immigration compliance is one of the highest-risk areas, as consequences can include operational restrictions on hiring.

– Immigration Employment Infringement Scheme: per-infringement fees

Immigration New Zealand describes its Immigration Employment Infringement Scheme, including infringement notices and fees. It states that infringement fees may be:

  • NZD $1,000 for an individual
  • NZD $3,000 for a body corporate (company)

It also explains that additional consequences can include:

  • loss of accredited employer or Recognised Seasonal Employer status
  • being banned (stood down) from supporting further visas for a period, depending on the number of infringement notices

– “More serious breaches” and criminal penalties

Immigration New Zealand notes that more serious breaches may result in criminal charges.

The Immigration Act 2009 sets out significant penalties for specified offences, including (for certain offences) liability to up to 7 years’ imprisonment, a fine up to $100,000, or both, and in some cases the penalties apply per person in respect of whom the offence was committed.

Immigration New Zealand’s employer guidance also states that if an employer allows a migrant to work knowing they are not entitled to work, prosecution is possible, with maximum penalties described, and it highlights even more severe maximums in exploitation-related contexts.

Why do global employers get caught?

  • They rely on third-party recruiters or agencies and don’t verify conditions
  • They fail to maintain up-to-date visa/conditions tracking
  • Role changes occur without reassessing visa conditions
  • Documentation requests are missed or responded to late (which can itself be an infringement)

Immigration compliance needs a system, not a spreadsheet, once headcount grows.

Health and safety non-compliance: HSWA 2015 offence categories and very high maximums

Health and safety is one of the most serious compliance areas in New Zealand because of the potential for worker harm and the severity of penalties under the Health and Safety at Work Act 2015 (HSWA).

HSWA offence categories and maximum penalties

The HSWA sets out different offence categories (including reckless conduct). The legislation provides for significant maximum penalties, including for a body corporate in the most serious category, up to $3 million (and for individuals, potential imprisonment).

WorkSafe provides guidance on offences and penalties and lists penalty amounts in specific contexts, reinforcing that the HSWA structure differentiates duties and offences.

What this means for businesses (including “office-based” businesses)

Many companies think HSWA is mostly for construction and heavy industry. Those sectors are higher-risk, but HSWA duties apply broadly. For offices and remote/hybrid teams, HSWA compliance risk often shows up in:

  • unsafe work environments and inadequate risk management
  • Poor incident reporting and investigation
  • psychosocial hazards (stress, bullying) and failure to manage them appropriately
  • contractor management failures

The enforcement lesson is the same: regulators look for whether you had reasonable systems.

AML/CFT non-compliance

If you’re in a regulated sector, such as financial services, payments, money remittance, certain professional services, casinos, some real estate, and legal/accounting activities, AML/CFT compliance is high-stakes.

1. AML/CFT Act 2009 pecuniary penalties

The AML/CFT Act includes civil pecuniary penalties with stated maximums. The legislation includes maximum pecuniary penalty amounts, such as:

  • $100,000 for individuals and $1 million for body corporates/partnerships (and higher maximums for certain specified civil liability acts).

The New Zealand Ministry of Justice explains the AML/CFT framework and notes that multiple government agencies supervise and provide guidance to reporting entities.

2. Why AML/CFT penalties feel “bigger than the number.”

Even where a penalty is capped, AML/CFT enforcement often requires expensive remediation:

  • customer due diligence remediation and file review
  • system changes for monitoring and screening
  • governance and audit improvements
  • external consultants, independent reviews, and reporting to supervisors

For global companies, AML/CFT compliance problems often arise from:

  • scaling customer onboarding too fast
  • outsourcing onboarding without adequate oversight
  • Poor beneficial ownership verification
  • weak ongoing monitoring
  • inconsistent record-keeping

Consumer protection and advertising

Misleading or deceptive conduct, unfair practices, and problematic advertising are major enforcement areas because they impact consumers directly and are easy to identify and prosecute.

New Zealand has announced significant changes to penalty settings. MBIE’s Fair Trading Act changes page describes new penalties, including:

  • $1 million for individuals or $5 million for bodies corporates, or
  • 3 times the value of the commercial gain made or loss avoided, or
  • other value-based calculations tied to the transaction(s).

The Commerce Commission also publicly discussed these increases and framed them as sending a strong deterrence signal, noting the need for larger penalties for large corporates.

Practical takeaway: If you sell to consumers in New Zealand, especially online, ensure your advertising claims, pricing statements, subscription terms, and refund representations are accurate and consistently implemented in your systems.

Why do global companies get penalised in New Zealand?

Most enforcement isn’t about one mistake. It’s about system failures and repeated patterns. The most common causes:

  • Manual compliance tracking (deadlines missed, responsibilities unclear)
  • Fragmented vendors and advisors (no one owns the full picture)
  • Under-resourced local ops (HQ assumes “NZ is easy” and doesn’t staff compliance)
  • Fast hiring without payroll/visa tracking maturity
  • Weak documentation culture (can’t evidence compliance when asked)
  • Overpromising in marketing and failing to align systems with claims

How to reduce penalty exposure without slowing your business down?

Reducing compliance risk doesn’t mean burying your business in red tape. The goal is to design compliance processes that are predictable, lightweight, and embedded into everyday operations, so obligations are met automatically, and issues are caught early without distracting teams from growth.

A) Build a compliance calendar tied to owners and evidence

  • Tax filing/payment dates and PAYE/employment information obligations
  • GST filing (basis-specific penalty awareness)
  • Companies Office filing deadlines and director responsibilities
  • Immigration compliance checks, visa condition renewals, and documentation response deadlines
  • Privacy breach response and notification decision workflow

B) Design payroll and HR for minimum standards compliance

  • accurate entitlements and record-keeping
  • regular internal audits for minimum entitlements
  • clear contractor/employee classification process
  • a playbook for MBIE/Labour Inspectorate interactions

C) Treat “what you claim” in marketing as a compliance obligation

If you advertise pricing, subscription terms, cancellation rights, performance claims, or consumer rights:

  • align website copy, customer support scripts, billing systems, and policies
  • test “what happens in reality” against “what you say” Fair Trading Act penalties are increasing, and enforcement is active.

D) If you’re subject to AML/CFT: invest early in controls

  • onboarding, due diligence, beneficial ownership
  • transaction monitoring, suspicious activity reporting processes
  • governance documentation, and training. AML/CFT pecuniary penalty settings can be very large.

How can Commenda help in this situation, and why it matter for New Zealand compliance?

New Zealand compliance is manageable until you have multiple entities, multiple countries, more employees, and more filing cycles. The most common reason companies get penalised isn’t that they don’t care. It’s those tracking breaks: responsibilities are unclear, deadlines are missed, and documentation isn’t easily retrievable when regulators ask for it.

Commenda helps reduce that operational risk by giving businesses a structured way to manage compliance across entities and jurisdictions:

  • Centralised visibility of entity obligations and deadlines (so the Companies Office, IRD, and other recurring requirements don’t live in someone’s memory or inbox).
  • Repeatable workflows for filings, approvals, and record-keeping are important in regimes where penalties stack for repeated late filings or payments.
  • Reduced “single point of failure” risk when a finance manager, founder, or local director changes roles.
  • Scalability as you add headcount, introduce contractors, or expand into regulated activities like fintech.

If you’re operating in New Zealand (or expanding there) and want compliance to be predictable instead of reactive:

Explore Commenda to streamline entity and compliance management across countries.

Book a demo! 

Join hundreds of international businesses growing fast with Commenda

Talk to an expert

Frequently asked questions

About the author

Logan Jackonis

Logan Jackonis

Head of Services & Operations, Commenda

Logan leads Commenda’s Services and Operations team, helping controllers, heads of tax, and finance leaders navigate international expansion. He built a global expert network across 70 countries and previously worked in management consulting across the Middle East and Southeast Asia.

Disclaimer: Commenda and its affiliates do not provide tax, accounting, or legal advice. This material has been prepared for informational purposes only, and is not intended to provide or be relied on for tax, accounting, or legal advice. You should consult your own tax, accounting, and legal advisors before engaging in any related activities or transactions.