No. Doxxing—publishing private or identifying information to harass or intimidate—is illegal in New Zealand under multiple statutes, including the Harmful Digital Communications Act 2015 and Privacy Act 2020. The Department of Internal Affairs enforces these laws, with penalties up to NZ$50,000 for individuals and NZ$200,000 for organizations. Recent 2026 amendments to the Crimes Act 1961 introduce stricter penalties for digital harassment, reflecting heightened scrutiny of online abuse.
Key Regulations for Doxxing in New Zealand
- Harmful Digital Communications Act 2015 (HDCA): Prohibits posting or sharing private information with intent to cause harm, distress, or humiliation. The Online Safety Commissioner investigates complaints under this Act, issuing takedown notices or pursuing prosecutions.
- Privacy Act 2020: Mandates strict handling of personal information. Unauthorized disclosure—even of publicly available data—can breach Principle 11, triggering investigations by the Office of the Privacy Commissioner.
- Crimes Act 1961 (2026 Amendments): Expands criminal liability for “digital stalking” (s 216H) and “coercive control” (s 216I), targeting doxxing as part of broader online abuse frameworks. Courts may impose imprisonment up to 2 years for aggravated offenses.
Enforcement prioritizes intent and harm, but even reckless sharing of identifying details may result in liability. Organizations must implement robust data protection policies to avoid vicarious liability under the Privacy Act.