Establishing and Maintaining a Finance Company in New Zealand

Overview of the Financial Services Regulatory Landscape

The regulatory environment governing finance companies, non-bank lenders, and financial service providers in New Zealand is comprehensive, modern, and structured around market integrity, consumer protection, and transparency. Commercial entities operating within this sector are subject to co-ordinated oversight by principal regulatory bodies, including the Reserve Bank, the Financial Markets Authority, the Commerce Commission, and the privacy regulator. Any entity engaging in the business of providing financial services must navigate mandatory registration, institutional supervision, and conduct obligations tailored to the nature of the services offered and the classification of the end client.

Entities providing financial facilities, issuing debt securities, acting as credit providers, arranging foreign exchange transactions, offering custodial or broking services, giving financial guarantees, operating as non-bank deposit takers, or offering financial advice must register on the national electronic register of financial service providers (the Financial Service Providers Register). Qualification for registration requires membership in an approved independent dispute resolution scheme if retail clients are serviced, together with satisfactory background screening of directors and controlling persons. The regulatory framework distinguishes clearly between wholesale commercial dealings and retail market activities, imposing stringent disclosure, licensing, and conduct standards on participants interacting with retail consumers and retail investors.

For international financial institutions and overseas sponsors seeking to establish operations in New Zealand, the regime provides clear avenues for entry, whether by incorporating a local subsidiary or registering a branch. Compliance imperatives require an integrated operational framework encompassing prudential capital controls, sophisticated anti-money laundering mechanisms, personal property securities perfection protocols, fair trading safeguards, and statutory data handling standards. Maintaining an active financial operations footprint requires continual adherence to governance benchmarks, regular reporting to sector supervisors, and transparent engagement with regulatory authorities.

Corporate Registration and Governance – Companies Act 1993

Operating a financial business in New Zealand requires formal corporate establishment through the national Companies Office Register. Commercial organisations generally elect to operate either through the incorporation of a domestic limited liability company or through the registration of an overseas company operating as a branch office. An overseas corporation carrying on business in New Zealand must apply for registration as an overseas company within 10 working days of commencing business operations within the jurisdiction. The registration process necessitates securing name reservation approval from the Companies Office registrar, submitting constitutional documents, identifying resident agents authorised to accept service of legal process, and declaring the details of all appointed directors.

Corporate governance duties apply vigorously to all operating entities. Directors and senior executives must maintain rigorous oversight over solvency tests, conflict-of-interest registers, capital maintenance requirements, and mandatory corporate filings. Transactions involving major commercial commitments or asset dispositions require formal approvals in accordance with statutory thresholds and constitutional governance rules.

Financial Reporting and Accounting Records – Financial Reporting Act 2013

All operating commercial entities must adhere to statutory accounting, auditing, and financial reporting standards. Commercial enterprises must maintain full, accurate, and up-to-date accounting records that enable the financial position of the business to be determined with reasonable accuracy at any point in time, allow the directors to ensure financial statements comply with applicable accounting frameworks, and facilitate proper independent audit procedures.

Large overseas companies carrying on business in New Zealand and large domestic subsidiaries face enhanced financial reporting obligations. A commercial entity is generally classified as large if it exceeds defined annual revenue or total asset thresholds across consecutive financial periods. Large commercial entities, together with registered financial service providers and public issuers, must prepare annual financial statements prepared in accordance with applicable financial reporting standards, engage an independent qualified auditor to audit those financial statements, and file the audited accounts on the public corporate register within statutory deadlines following the conclusion of each financial year. These financial disclosures ensure transparency for creditors, counterparties, regulators, and the investing public.

Secured Transactions and Personal Property Securities – Personal Property Securities Act 1999

The regime governing secured transactions establishes an integrated framework for the creation, priority, and enforcement of security interests over all forms of personal property. The system applies to all transactions that in substance create a security interest, irrespective of the legal form of the agreement, the technical title to the collateral, or traditional property concepts such as conditional sales, chattel mortgages, hire purchase arrangements, or security assignments.

For a security interest to be effective and enforceable against the debtor, it must attach to the underlying collateral. Attachment occurs when:

• Value is given by the secured party to the debtor;
• The debtor has rights in the collateral or the power to transfer rights in the collateral to a secured party; and
• A signed, written security agreement is executed containing an adequate description of the collateral by item or kind, or stating that a security interest is taken in all present and after-acquired personal property.

To protect the security interest against competing creditors, subsequent purchasers, and insolvency administrators, the secured party must achieve perfection. Perfection is achieved when the security interest has attached and the secured party has either registered a financing statement on the public electronic Personal Property Securities Register or taken physical possession of the collateral. Timely registration on the public register is paramount; an unperfected security interest is subordinate to a perfected security interest and is void against a liquidator, official assignee, or administrator upon the debtor’s insolvency.

Anti-Money Laundering and Countering Financing of Terrorism Act 2009

Customer Due Diligence and Compliance Programmes

Finance companies, non-bank lenders, and financial service intermediaries are classified as reporting entities and must maintain robust systems to combat financial crime, money laundering, and the financing of terrorism. A reporting entity must develop, implement, and maintain two foundational internal compliance instruments:

• Written Risk Assessment:A comprehensive evaluation of the money laundering and terrorism financing risks faced by the business, considering the nature, scale, and complexity of operations, customer types, delivery channels, products and services provided, and geographical jurisdictions of operation.
• Anti-Money Laundering Compliance Programme:Detailed internal policies, procedures, and controls designed to detect, manage, and mitigate the risks identified within the risk assessment. The programme must provide for employee vetting, ongoing compliance training, internal audit mechanisms, and the appointment of a designated compliance officer. Independent audits of the risk assessment and compliance programme must be conducted at regular intervals by a qualified independent auditor.

Customer Due Diligence (CDD) constitutes a primary operational obligation. Reporting entities must identify and verify the identity of customers, beneficial owners, and individuals acting on behalf of customers using independent, reliable source documents, data, or information.

Reporting, Record-Keeping, and Supervisory Powers

Reporting entities are subject to mandatory disclosure and record-keeping standards overseen by designated supervisory authorities. Financial service providers, finance companies, and non-bank lenders are supervised by the Department of Internal Affairs, the Financial Markets Authority or the Reserve Bank, depending on their institutional character.

Statutory reporting requirements include:

• Suspicious Activity Reports (SARs):Mandatory submission of reports to the financial intelligence unit within prescribed statutory timeframes whenever there are reasonable grounds to suspect that a transaction or proposed transaction relates to money laundering, terrorism financing, or proceeds of unlawful conduct. Strict tipping-off prohibitions prevent the disclosure of a SAR filing to the customer or unauthorised third parties.
• Prescribed Transaction Reports (PTRs):Mandatory reporting of all international wire transfers exceeding prescribed statutory value thresholds, as well as large physical cash transactions exceeding designated amounts.
• Annual Compliance Reports:Annual submission of structured compliance and risk data to the sector supervisor.

Supervisory authorities possess extensive statutory powers to conduct on-site inspections, demand the production of books and records, issue formal warning notices, accept enforceable undertakings, and initiate civil penalty or criminal enforcement proceedings. Failure to comply with compliance obligations exposes both the reporting entity and its individual directors to severe civil pecuniary penalties and criminal liability.

Financial Markets Conduct and Financial Advice – Financial Markets Conduct Act 2013

Financial Advice Provider Licensing and Conduct Standards

The regime governing financial advice services establishes an integrated licensing and conduct framework for all entities and individuals providing financial advice to retail and wholesale clients. Anyone in the business of giving financial advice to retail clients must operate under a Financial Advice Provider (FAP) licence issued by the financial markets conduct authority, or act as an authorised body, financial adviser, or nominated representative engaged by a licensed FAP.

The regime imposes direct statutory conduct duties across the financial advisory ecosystem, including duties to prioritise client interests, exercise competence and care, comply with the The law maintains a strict boundary between giving regulated financial advice (making recommendations or expressing opinions regarding financial products) and providing factual information, factual product descriptions, or operating execution-only broking and transmission facilities.

Retail Product Disclosure and Regulated Offers

Entities raising capital from retail investors or offering financial products—such as debt securities, equity securities, managed investment products, or derivatives—must satisfy stringent disclosure and governance standards. An offer of financial products to retail investors constitutes a regulated offer, requiring the preparation, lodging, and supply of a standardised Product Disclosure Statement (PDS), together with the publication of comprehensive material information on the electronic offer register.

A PDS must be written in plain language, be clear, concise, and effective, and provide essential details concerning product risks, investment terms, financial metrics, returns, fees, and issuer stability. Issuers of retail debt securities and managed investment products must appoint an independent licensed supervisor (trustee) and enter into a formal trust deed to monitor the issuer’s ongoing solvency, covenant compliance, and asset management.

Regulated offer rules apply unless a statutory wholesale exclusion is established. Offers made exclusively to wholesale investors, such as investment businesses, large entities meeting statutory asset or turnover thresholds, government bodies, and eligible investors who certify their financial knowledge and experience, are exempt from the requirement to prepare a PDS, lodge register entries, or appoint an independent supervisor. Advertising of financial products is subject to strict fair conduct rules prohibiting false, misleading, or deceptive statements, and non-exempt retail advertising must carry mandatory statutory disclaimers directing prospective investors to the PDS.

Deposit-Taking and Prudential Supervision – Non-bank Deposit Takers Act 2013 and Deposit Takers Act 2023

Entities that borrow money from the public and carry on the business of lending or providing other financial services, including finance companies, credit unions, and building societies, operate within the Non-Bank Deposit Taker (NBDT) regulatory regime overseen by the Reserve Bank. An entity qualifies as an NBDT if it makes debt securities available to the public and engages in the business of lending or financing, excluding registered banks and wholesale-funded commercial lenders.

NBDTs are subject to comprehensive prudential standards designed to protect depositor interests and preserve confidence in the non-bank financial sector:

• Mandatory Licensing:Operating as an NBDT requires a formal licence issued by the prudential regulator. Licences are granted only where the applicant demonstrates operational capability, robust risk management systems, and satisfactory governance arrangements.
• Governance and Fitness Requirements:NBDT boards must maintain a minimum number of independent directors. All directors and senior managers must satisfy strict fit-and-proper person standards before taking office and must maintain their integrity, competence, and financial standing throughout their tenure.
• Credit Rating Mandates:NBDTs must obtain and maintain a current credit rating from an approved international rating agency, disclosing that rating to depositors and the public, unless qualifying for a limited statutory exemption based on low deposit liability thresholds.
• Prudential Capital Adequacy:NBDTs must maintain minimum capital ratios and capital buffers, calculated against risk-weighted assets, to absorb unexpected losses and maintain operational solvency.
• Liquidity and Related-Party Exposure Limits:Mandatory quantitative limits govern maximum exposure to related parties, and institutions must maintain minimum holdings of high-quality liquid assets to satisfy continuous liquidity requirements.

The prudential regulator maintains extensive oversight powers, including the authority to inspect facilities, demand internal risk data, require independent investigative reports, give binding directions, impose operating conditions, and initiate statutory management or resolution procedures for distressed deposit-taking institutions.

Reserve Bank Oversight and Protected Banking Names – Reserve Bank of New Zealand Act 2021

The Reserve Bank functions as the nation’s central reserve bank and prudential regulator. Its core statutory responsibilities include formulating and implementing monetary policy to maintain price stability, promoting maximum sustainable employment, issuing domestic currency, and promoting the maintenance of a sound, efficient, and resilient financial system.

Under the central banking regime, commercial institutions operating in New Zealand must adhere to strict title-protection standards:

• Protected Banking Words:No person or company may use the words “bank”, “banker”, or “banking” in its name, title, or commercial description without obtaining formal statutory authorisation or registration from the central bank.
• Bank Registration:An institution wishing to operate as a fully registered bank must satisfy exhaustive capital, governance, risk management, and operational criteria, submit to continuous prudential supervision, and comply with binding conditions of registration.
• Supervisory Measures:The central bank conducts continuous supervision through mandatory disclosure statements, regular prudential consultations, risk assessments, capital monitoring, and supervisory stress testing across registered institutions.

Consumer Credit and Fair Trading Protections

Consumer Credit Contracts and Responsible Lending – Credit Contracts and Consumer Finance Act 2003

The provision of credit to private individuals is governed by a specialised consumer credit regime. A contract is classified as a consumer credit contract if the debtor is a natural person, the credit is acquired wholly or predominantly for personal, domestic, or household purposes, and the creditor charges interest, credit fees, or takes a security interest over personal property. This regime applies to personal loans, credit cards, revolving facilities, consumer hire purchase agreements, and mobile consumer lending.

Creditors operating in the consumer market must adhere to the Lender Responsibility Principles across the entire lifecycle of a loan. These include inquiry and verification duties, mandatory disclosure, unreasonable fees prohibition, hardship relief mechanisms, and reopening of oppressive contract.

Fair Trading and Prohibited Commercial Practices – Fair Trading Act 1986

Commercial organisations operating in trade must comply with rigorous fair trading standards designed to maintain competitive markets and protect consumers from misleading practices. The fair trading regime prohibits all persons in trade from engaging in conduct that is misleading or deceptive, or that is likely to mislead or deceive.

Key statutory prohibitions and compliance standards include:

• Unsubstantiated Representations:A business must not make an explicit or implicit representation in trade without having reasonable grounds for making the representation at the time it is made, regardless of whether the representation is actually false.
• Misleading Representations:Prohibitions apply to false or misleading statements concerning the price, nature, suitability, availability, terms, or quality of financial services or underlying goods.
• Unfair Contract Terms:Terms contained within standard-form consumer contracts or standard-form small trade contracts that are declared unfair by a court are legally void and unenforceable. A term is deemed unfair if it causes a significant imbalance in the parties’ rights and obligations, is not reasonably necessary to protect the legitimate commercial interests of the advantaged party, and would cause financial or non-financial detriment to the other party if applied or relied upon.

Enforcement authorities and affected counterparties may seek comprehensive civil remedies against defaulting entities, including statutory injunctions, corrective advertising orders, contract variation or cancellation, full restitution, and substantial pecuniary penalties.

Consumer Guarantees and Supply Remedies – Consumer Guarantees Act 1993

The statutory consumer guarantees regime establishes non-excludable minimum standards for the supply of goods and services to consumers. A consumer is defined as any person who acquires goods or services of a kind ordinarily acquired for personal, domestic, or household use or consumption, provided the goods are not acquired for the purpose of resupplying them in trade, using them in a production or manufacturing process, or repairing or treating other goods in trade.

The statutory guarantees applicable to the supply of goods and services include:

• Guarantees in Respect of Services:Services provided to a consumer carry implied guarantees that they will be carried out with reasonable care and skill, will be fit for any particular purpose made known to the supplier, will be completed within a reasonable time, and will be supplied at a reasonable price where the price is not fixed by contract.
• Guarantees in Respect of Goods:Goods supplied carry implied guarantees of acceptable quality (free from minor defects, safe, durable, and acceptable in appearance and finish), fitness for purpose, compliance with description or sample, and clear title and quiet possession.
• Remedies for Failure:If a failure can be remedied, the supplier must remedy the failure within a reasonable time; if the supplier refuses or fails to do so, the consumer may have the failure remedied elsewhere and recover all reasonable costs, or cancel the contract. Where the failure is of a substantial character, the consumer may reject the goods or cancel the service contract immediately and claim full damages for all reasonably foreseeable losses.

Contracting out of these statutory protections is strictly prohibited, save for an express, written agreement entered into between parties where goods or services are supplied and acquired in trade and the contracting-out is fair and reasonable.

Privacy, Data Protection, and Information Governance – Privacy Act 2020

Information Privacy Principles and Data Handling

All commercial entities, including finance companies and non-bank lenders, are classified as agencies and must manage personal information in strict conformity with national information privacy principles. Personal information includes any information about an identifiable living individual, encompassing customer application data, transaction histories, credit scores, employee files, and contractor information.

The foundational Information Privacy Principles mandate the following standards throughout the information lifecycle:

• Purpose and Collection:Personal information must only be collected for a lawful purpose connected with a function or activity of the agency, and the collection must be strictly necessary for that purpose. Collection must occur directly from the individual concerned, subject to limited exceptions such as public registers or express authorisation.
• Notification and Transparency:When collecting personal information, the agency must take reasonable steps to ensure the individual is aware of the collection, the purpose of collection, the intended recipients, whether the supply is mandatory or voluntary, and the individual’s statutory rights of access and correction.
• Security and Storage:An agency holding personal information must ensure that information is protected by reasonable security safeguards against loss, unauthorised access, use, modification, disclosure, or other misuse.
• Use and Disclosure Limitations:Information collected for one purpose must not be used or disclosed for another purpose unless an exception applies, such as express consent, threats to health or safety, or law enforcement investigations.
• Cross-Border Data Transfers:An agency may only disclose personal information to a foreign person or entity outside New Zealand if the foreign entity is subject to privacy laws that provide comparable safeguards to domestic law, or if the individual expressly authorises the transfer after being informed that comparable protections may not apply, or if the disclosure is governed by binding contractual model clauses requiring comparable protections.
• Access and Correction Rights:Individuals maintain an absolute statutory right to request confirmation of whether an agency holds personal information about them, access that information, and request the correction of any inaccurate data.

Mandatory Breach Notification and Regulatory Enforcement

The data protection framework establishes a mandatory notification regime for privacy breaches. A notifiable privacy breach occurs when there is unauthorised or accidental access to, or disclosure, alteration, loss, or destruction of personal information, or an action that prevents the agency from accessing the information on a temporary or permanent basis, where it is reasonable to believe that the breach has caused, or is likely to cause, serious harm to an affected individual.

Operational breach response obligations include:

• Assessing Serious Harm:When determining whether a breach is likely to cause serious harm, an agency must consider the sensitivity of the information, the nature of the harm that may result, the persons who have obtained or may obtain the information, the security measures protecting the information, and any mitigating action taken.
• Mandatory Notifications:Upon identifying a notifiable privacy breach, the agency must notify the Privacy Commissioner and all affected individuals as soon as practicable. If individual notification is not reasonably practicable, the agency must give public notice of the breach.
• Supervisory Compliance and Access Powers:The Privacy Commissioner maintains statutory authority to investigate complaints, issue binding compliance notices requiring an agency to do or cease doing specific acts, and issue binding access determinations requiring the release of personal information.
• Civil Remedies and Penalties:Failure to comply with mandatory breach notification rules or compliance notices constitutes an offence punishable by statutory fines. Individuals who suffer harm, emotional distress, or loss resulting from an agency’s privacy interference may pursue proceedings before the human rights review tribunal for compensatory damages and restraining orders.

Foreign Exchange Controls

New Zealand maintains an open, market-driven financial system characterised by the absence of exchange controls and restrictions on the movement of capital into and out of the jurisdiction. International investors and domestic corporate entities are free to transfer capital, repatriate business earnings, distribute dividends, and make payments of interest, royalties, and management fees across international borders.

Foreign exchange transactions and capital transfers may be executed freely through authorised financial intermediaries and commercial banks. While exchange controls do not exist, cross-border wire transfers and large electronic funds movements remain subject to reporting obligations under the anti-money laundering framework to preserve financial transparency and prevent international illicit financial flows.

 

Our Capability

Finance Law has extensive experience in supporting clients establishing finance companies and providing related advice. We have insights into all aspects of banking, finance, financial institutions and the regulatory authorities that shape their activities.