Composite Score
63.5
out of 100
New Zealand places in Tier 2 of the ITU Global Cybersecurity Index 2024 — an advancing posture with substantial implementation across the five GCI pillars. A comprehensive data-protection statute is in force, and a designated supervisory authority is identified in the IAPP Global Privacy Directory. On the question of artificial intelligence policy, a national AI policy is registered in the OECD AI Policy Observatory; on the question of open-government practice, New Zealand is a member of the Open Government Partnership. Domestic data-center capacity is measurable and growing — present in the public investment surveys at a notable scale, and foundational digital identity coverage is developing — the World Bank ID4D dataset records meaningful issuance with gaps. New Zealand is the subject of a European Commission adequacy decision, recognizing the country's data-protection regime as substantially equivalent for cross-border transfer purposes.
With a composite of 63.5 out of 100, New Zealand sits at rank 49th out of the 194 States surveyed in Edition 0. The country's strongest pillar at this Edition is Ecosystem, Education & Implementation, scoring 7.7 out of 10; its thinnest is Sovereign Haven Infrastructure, at 4.6 out of 10. Within the Asia-Pacific region, New Zealand sits above the regional average composite of 37.2. The pillar pattern is the substantive material the Charter invites the State to engage with — neither a leaderboard position, nor a final verdict, but a structured picture of where the open-source record is full and where it remains to be built.
On the side of what helps: the European Commission's adequacy decision affirms the country's regime as protective for cross-border transfer purposes; a comprehensive data-protection statute supplies the domestic statutory foundation; the designated supervisory authority is identified in the IAPP Global Privacy Directory and provides an institutional channel for enforcement; a national AI policy registered in the OECD AI Policy Observatory provides a published baseline against which Article 6 of the Charter can be tested; Open Government Partnership membership provides a formal venue for civil-society scrutiny. On the side of what has not yet been done: the country's record at this Edition is unusually clean — the Custodian invites continued engagement to ensure that subsequent Editions reflect any changes in posture.
The complete IDSI Edition 0 (2026) report — methodology, sources, sub-indicators for all 194 States.
Get the full IDSI Edition 0 (2026) reportStates, civil-society organizations, and individuals may request a re-evaluation of any entry. The Custodian commits to a written response within thirty days.
Request a re-evaluation of New Zealand's entryWhat New Zealand is currently doing on data sovereignty. The links below lead to government databases, international legal trackers, and contemporaneous news. They are the public record from which the Custodian’s scoring is drawn — and the starting point for any reader seeking to understand the country’s posture in depth.
All links open in a new tab. The Custodian does not control these third-party sites and is not responsible for their content. If you find a more authoritative government source for any item above, please let us know via the re-evaluation form below — we will update the page within thirty days.
Submissions are received under the standing Correction Notice protocol. Provide as much public-source detail as you can — the Custodian re-scores from open-source evidence, not from claim alone.
Standing Correction Notice — the State of New Zealand may request, in writing, the publication of a corrected entry within thirty days of any factual error. Edition 0 entries are derived from the open-source record only; nothing on this page is offered as a verdict, and the Initiative welcomes engagement that improves accuracy.