{"id":4031,"date":"2026-03-15T00:10:00","date_gmt":"2026-03-15T00:10:00","guid":{"rendered":"https:\/\/insight.thomsonreuters.co.nz\/legal\/?p=4031"},"modified":"2026-03-12T22:58:51","modified_gmt":"2026-03-12T22:58:51","slug":"new-zealand-joins-budapest-convention-on-cybercrime","status":"publish","type":"post","link":"https:\/\/insight.thomsonreuters.co.nz\/legal\/posts\/new-zealand-joins-budapest-convention-on-cybercrime","title":{"rendered":"The Expert\u2019s Edge Special:\u202fNew Zealand joins\u00a0Budapest Convention on Cybercrime\u00a0"},"content":{"rendered":"\n

On 30 July 2025, the\u202fBudapest Convention and Related Matters Legislation Amendment Act 2025\u202freceived Royal Assent, with most of the amendments coming into force on 1 October 2025. The amendments align New Zealand law with the Council of Europe Convention on Cybercrime (commonly referred to as the Budapest Convention) and paved the way for New Zealand acceding to the Convention on 1 December 2025. Eighty-one countries are currently parties to the Budapest Convention, with 12 additional countries invited to accede.\u202f <\/h4>\n\n\n\n
\n

\u201c11 per cent of New Zealanders were victims of fraud and cybercrime in 2024, and the National Cyber Security Centre estimates $1.6 billion was lost to online threats.\u201d Beehive (Ministerial) release:\u202fNew Zealand joins fight against cybercrime<\/em>\u202f(24 July 2025)<\/strong><\/a> <\/p>\n<\/blockquote>\n\n\n\n

The Budapest Convention \u2014 the only binding international treaty on cybercrime \u2014 improves co-operation on cross-border investigations and prosecutions by providing a consistent framework for defining computer crimes, facilitating and enhancing lawful access to evidence and outlining expectations about how relevant international agencies assist each other. The Convention requires provisions to uphold and promote human rights, particularly the right to be free from unreasonable search and seizure. <\/p>\n\n\n\n

Acceding to the Convention strengthens New Zealand law enforcement agencies\u2019 abilities to tackle cybercrime through greater access to digital evidence domestically and overseas, fostering international co-operation. Joining the Convention was also a recommendation of the Royal Commission of Inquiry into the terrorist attack on Christchurch masjidain on 15 March 2019. <\/p>\n\n\n\n

The main legislative changes are amendments to the Search and Surveillance Act 2012 and Mutual Assistance in Criminal Matters Act 1992, with minor changes to the Telecommunications (Interception Capability and Security) Act 2013 and Crimes Act 1961. <\/p>\n\n\n\n

Search and Surveillance Act 2012 <\/strong> <\/h4>\n\n\n\n

The primary change is the expansion of law enforcement powers by empowering a constable to apply to the Commissioner of Police for a \u201cpreservation direction\u201d to an individual and organisation. Such a direction allows police (and foreign partners who apply for a direction) to require providers to preserve specified documents or data that may be evidential material relating to a suspected offence, serving as an interim measure before a production order is sought or, in the case of a foreign enforcement authority, a mutual assistance request is received. Applications require reasonable grounds to suspect an offence has occurred or will occur, and that relevant documents may be lost, modified or deleted before a production order can be obtained or a mutual assistance request determined. A direction compels recipients to maintain document integrity, disclose their location, and produce \u201cpathway information\u201d (traffic data identifying the path of a telecommunication) to assist investigations. <\/p>\n\n\n\n

Preservation orders are time-limited, generally lasting up to 20 days in the case of a domestic application and 150 days in the case of a foreign application.\u202fFailure to comply is a criminal offence, carrying penalties of up to one year\u2019s imprisonment for individuals, and fines of up to NZ$40,000 for organisations. There are new offences for non-compliance and rules that prohibit revealing that a preservation direction was issued. <\/p>\n\n\n\n

Mutual Assistance in Criminal Matters Act 1992<\/strong> <\/h4>\n\n\n\n

Amendments make it easier for New Zealand to seek and provide assistance in cross-border cybercrime matters, with new measures ensuring human rights are upheld. New Zealand can supply assistance, and receive requests, for a wider range of investigative powers, including production orders and surveillance device warrants supporting overseas investigations. <\/p>\n\n\n\n

Telecommunications (Interception Capability and Security) Act 2013<\/strong> <\/h4>\n\n\n\n

Terminology and definitions have been updated to align with the Convention\u2019s language and powers. <\/p>\n\n\n\n

 Crimes Act 1961<\/strong> <\/h4>\n\n\n\n

Amendments ensure New Zealand criminal law fully aligns with the Convention\u2019s requirements relating to computer-related offending. Two new offences have been established: <\/p>\n\n\n\n