NZ, 18 others sign joint statement on trustworthy data governance for AI

Signatories aim for clear standards to process training data lawfully

NZ, 18 others sign joint statement on trustworthy data governance for AI

Alongside 18 other data protection agencies, New Zealand has issued a joint statement on building trustworthy data governance frameworks to encourage the development of innovative and privacy-protecting AI, according to New Zealand’s Office of the Privacy Commissioner (OPC). 

At the Global Privacy Assembly in Seoul, South Korea from 15–19 September 2025, New Zealand and the 18 other data protection authorities – Australia, Belgium, Bulgaria, Canada, Croatia, Finland, France, Germany, Hong Kong, Ireland, Italy, Korea, Luxembourg, Macao SAR, Spain, Poland, Sweden, and the UK – signed the joint statement. 

“I welcomed the chance to sign this statement and join with other privacy and data protection bodies,” said Michael Webster, New Zealand’s privacy commissioner, in a media release. “Considering privacy is a critical part of using AI in ways that achieve the intended outcomes and earn New Zealanders’ trust.” 

In the OPC’s media release, Webster emphasised the importance of collaborating with other jurisdictions regarding AI. Webster said the joint statement aims to show global recognition of significant AI challenges. 

Webster added that the joint statement seeks to spotlight: 

  • the opportunities AI presents 
  • risks that responsible AI use should consider, including data protection and privacy concerns, discrimination, bias, disinformation, and hallucinations 
  • the heightened need to safeguard privacy and other fundamental rights 

Webster stressed that appropriate AI use entails acknowledging the importance of incorporating privacy-by-design principles in AI system development and deploying AI in line with data protection and privacy rules and other norms. 

Webster highlighted data protection agencies’ role in shaping data governance and imposing precise requirements and guidance for organisations to implement AI innovatively and tackle AI’s evolving challenges while ensuring privacy protections. 

“People building and using AI tools are using information in new ways, including personal information,” Webster said. “Most of the development of popular AI systems happens outside New Zealand.” 

Commitments

According to the OPC’s media release, through the joint statement, New Zealand seeks to show its support for an extended global commitment to innovative and privacy-protecting AI. Specifically, the signatories said they would: 

  • Share an understanding of the lawful grounds for processing AI training data in their respective jurisdictions 
  • Clarify the standards and requirements to ensure the lawful processing of AI training data, whether based on consent, contractual necessity, legitimate interest, or other legal bases 
  • Exchange information and share an understanding of proportionate safety measures 
  • Reduce legal uncertainties and ensure space for innovation where data processing is necessary to develop and deploy AI