New Zealand

Section 4(1)(a) requires the parties to an employment relationship to deal with each other in good faith, and s 4(1)(b) bars them from doing anything to mislead or deceive each other. Section 4(1A)(b) says good faith requires the parties to be active and constructive. Labour Inspectors, the Authority and the court hold enforcement powers (s 3(ab)).

Section 21 prohibits an employer from retaliating, or threatening to retaliate, against an employee for intending to make or having made a protected disclosure; the employee can raise a personal grievance under the Employment Relations Act 2000. Section 22 separately prohibits any person from victimising someone because of a protected disclosure.

Section 17 lets the Commerce Commission issue network standards imposing requirements on participants in designated networks, s 24(1) lets it direct participants to take specified action, and s 30 allows merchant surcharging standards. Visa and Mastercard are the initially designated networks, according to the Commission.

Section 11(1)(a) requires a person in the business of providing a financial service to be registered for that service, and s 11(2) makes a knowing breach an offence (up to 12 months' imprisonment or a $100,000 fine for an individual, and a fine of up to $300,000 otherwise). Service types in s 5(1) include operating a money or value transfer service and issuing or managing electronic money. The FMA says crypto-asset service providers must register where the Act applies.

Under Part 3 of TICSA, section 48 requires a network operator to notify the Director of the GCSB of proposed procurement of equipment, systems or services in an area of specified security interest, or changes to their architecture or ownership. Notice must come early enough for the Director to consider action under section 51. The NCSC says operators must also engage with it as soon as practicable after identifying a possible network security risk.