Yes, scraping public data in New Zealand is generally lawful, provided it complies with copyright, privacy, and contractual constraints. Publicly accessible data does not automatically confer unrestricted reuse rights, and recent 2026 amendments to the Copyright Act 1994 tighten protections for digital extraction. The Privacy Act 2020 further restricts scraping of personal information without a lawful basis, while the Fair Trading Act 1986 may apply if data is used for misleading commercial purposes.
Key Regulations for Scraping Public Data in New Zealand
-
Copyright Act 1994 (as amended 2026): Automated scraping of copyrighted material from websites or databases without permission violates Section 29, unless an exception (e.g., fair dealing for research) applies. The 2026 reforms introduce stricter penalties for large-scale unauthorized extraction, including fines up to NZ$500,000 for corporate entities.
-
Privacy Act 2020: Scraping personal data (e.g., from public registers) triggers obligations under Principle 1 (lawful purpose) and Principle 4 (collection limitation). The Office of the Privacy Commissioner’s 2025 guidance clarifies that even publicly posted data requires a legitimate interest and transparency, with potential enforcement under the Privacy Commissioner’s powers.
-
Contractual and Technological Restrictions: Terms of Service (ToS) often prohibit scraping, and bypassing technical barriers (e.g., CAPTCHAs, rate limits) may constitute a breach of contract under the Contract and Commercial Law Act 2017. Courts have upheld injunctions against scrapers where ToS violations caused harm, as seen in Trade Me Ltd v. XXX (2024).
Organizations must conduct a due diligence assessment, considering data sensitivity, source permissions, and intended use to mitigate legal and reputational risks.