Source: PSA
Economy – Updates to Deposit Takers Act implementation timeline and standards – Reserve Bank
17 July 2025 – The Reserve Bank of New Zealand – Te Pūtea Matua has today published an updated implementation timeline for incoming changes to the prudential regulatory regime for deposit takers.
The Deposit Takers Act 2023 (DTA) modernises the regulatory framework to help ensure the safety and soundness of deposit takers and support a stable financial system that New Zealanders can trust.
DTA standards will be issued by 31 May 2027 and come into effect on 1 December 2028.
“The standards bring to life the prudential requirements deposit takers will need to meet to be licensed under the DTA,” Director Prudential Policy Jess Rowe says.
Public consultation on the proposed standards took place across 2024 and 2025.
“We're grateful for the insightful feedback received from submitters, and we're now hard at work preparing the exposure drafts of the standards,” Ms Rowe says.
Exposure draft consultation will take place in three tranches, starting in October 2025.
Licensing of existing deposit takers will occur over an 18-month window, running from 1 June 2027 to 30 November 2028, ahead of the standards coming into effect on 1 December of that year. The change means all banks and non-bank deposit takers will be licensed under a single, coherent regulatory regime. In late 2025, we hope to communicate information about our approach to licensing existing deposit takers under the DTA.
Changes to the DTA implementation timeline were necessary to allow time for a review of key capital settings, announced on 31 March 2025. DTA standards were previously planned to come into effect in July 2028.
DTA timeline – Reserve Bank of New Zealand – Te Pūtea Matua: https://govt.us20.list-manage.com/track/click?u=bd316aa7ee4f5679c56377819&id=e1c35a6635&e=f3c68946f8
2025 Review of key capital settings: https://govt.us20.list-manage.com/track/click?u=bd316aa7ee4f5679c56377819&id=f4705877ae&e=f3c68946f8
Response to submissions on the non-core standards
In 2024, we received 25 submissions to public consultation on DTA non-core standards.
In response to feedback, we have made changes to further support a proportionate approach, reduce the impact of compliance on deposit takers, and enhance potential competition in the market. Changes resulting from consultation include removing prescriptive detail and making requirements more flexible in certain areas.
Our overall assessment remains that we are striking a good balance between our primary financial stability mandate and our purposes and principles, including proportionality and competition.
Deposit Takers Non-Core Standards – Reserve Bank of New Zealand – Citizen Space: https://govt.us20.list-manage.com/track/click?u=bd316aa7ee4f5679c56377819&id=88eeb490a1&e=f3c68946f8
A summary of submissions on the Crisis Management Issues Paper has also been published.
Crisis management under the Deposit Takers Act 2023 – Issues Paper – Reserve Bank of New Zealand – Citizen Space: https://govt.us20.list-manage.com/track/click?u=bd316aa7ee4f5679c56377819&id=aaa9de9963&e=f3c68946f8
Terminology explained
Core standards
These are the standards that we will use as the criteria to determine the eligibility of existing banks and NBDTs for relicensing under the DTA.
Non-core standards
These are the other standards that all deposit takers will need to comply with when the DTA standards regime starts but will not be used for relicensing existing deposit takers.
Deposit takers will need to comply with all standards when they come into force in 2028.
Memorials – Potential Christchurch sites for National Erebus Memorial shared with families
Source: Ministry for Culture and Heritage
Health – New low-risk drinking guidelines challenge outdated advice
Source: Alcohol Healthwatch
Rural News – Progress on rates reform – but only half the picture – Federated Farmers
Source: Federated Farmers
Local News – Families meet as part of Porirua Hospital Memorial project
Source: Porirua City Council
Events – Step Up for Guide Dogs This Winter: Join the PAWGUST Challenge
This August, Kiwis are lacing up their walking shoes and joining PAWGUST, a nationwide challenge supporting the guide dogs who help New Zealanders live life without limits.
Whether you’re walking solo or side-by-side with your dog, PAWGUST invites you to step outside every day in August and help raise vital funds for Blind Low Vision NZ Guide Dogs. Participants commit to walking or running a set distance while gathering sponsorship from fri
Politics – Farmers welcome halt to new plan changes
Source: Federated Farmers
Investments Sector – NZ SUPER FUND STAKEHOLDER UPDATE
Nelson-Tasman State of Emergency
NZ Super Fund-owned farms and orchards in the top of the South Island seem to have escaped the worst of the recent weather, with extensive cleaning up required but no significant damage to trees or infrastructure. Our thoughts are with those of our neighbours who have been hit hard by successive storms and heavy rain events over the past few weeks. The FarmRight team has been out in the community helping where it can.
Kaingaroa Timberlands expands plantation area
Kaingaroa Timberlands (KT), in which the Guardians has a 42 percent shareholding, recently announced it had bought 9,200 hectares of forestry land from Te Waihou Holdings Ltd.
Ryan Cavanagh, Chief Executive of KT subsidiary Timberlands, said the transaction underscored KT’s long-term commitment to New Zealand and its confidence in the forestry industry:
“By expanding our estate, we are not only securing the future of forestry in the Central North Island, we are also positioning ourselves to make further investments in our operations, driving further economic growth and job creation. It will help ensure New Zealand can remain a global leader in responsibly managed forestry.”
Ryan said the transaction preserves the land’s established role in commercial forestry and supports the South Waikato region’s economic and environmental objectives.
Select Committee Report tabled
The Finance & Expenditure Select Committee has presented a report on the Guardians of New Zealand Superannuation to Parliament. The Committee’s report draws on our appearance before them on 2 April, and covers topics including performance, tax status, domestic investments, and the Elevate NZ Venture Fund. The full report can be found here.
Guardians Board Member joins Business Hall of Fame
Ahead of her induction next month into the NZ Business Hall of Fame, Guardians Board member Hinerangi Raumati talked to the NBR’s Mike McRoberts about the growing influence of kaupapa Māori in corporate New Zealand, and her own efforts to integrate Māori values and perspectives into mainstream boardrooms.
“There is a certain group dynamic that can happen in a room full of men … just bringing a different lens to things, as well as having a holistic view of the world, is what my approach has always been,” said Hinerangi – referring to a time in her career when she was frequently not only the sole Māori at the decision-making table but also the only woman.
Hinerangi also told the NBR that while it’s important to recognise what has been achieved, more remains to be done.
“None of us should sit on our laurels in terms of what we’ve achieved, and we shouldn’t lower our expectations either. Just keep raising the bar on what we’ve done. There’s good things being done in this country … we should all be proud of those things.”
Go to the Business Hall of Fame website for more information on Hinerangi and the other 2025 laureates; click here to read Mike McRoberts’ full story (paywalled).
Super Fund reintroduces buyout strategies
After stepping back from private market buyouts more than ten years ago, the NZ Super Fund is re-entering the global arena with a commitment of around US$800 million, reports i3Insights’ Florence Chong.
Doug Bell and Sian Orr from our External Investments & Partnerships team talked to Florence about how this initiative reflects a broader strategy designed to enhance international diversification, leverage specialist external managers, and integrate sustainability and other ESG considerations into the NZ Super Fund’s private markets programme.
Read the full article here: https://nzsuperfund.cmail20.com/t/d-l-suikyut-hujkdust-o/
Tech – RedShield enhances DDoS and bot attack protection with ‘Third Horizon’
Innovative RedShield identity challenge responds to evolving threat landscape
Auckland, New Zealand, 16 July 2025 – RedShield, a web application security service using AWS technology, has introduced a new layer of security in response to the proliferation of ever-more-sophisticated Distributed Denial-of-Service (DDoS) and automated bot attacks.
The new ‘Third Horizon’ protection that RedShield is introducing to its service thwarts DDoS attacks by disrupting the attack vector, requiring bad actors to respond in ways that cannot easily be managed by typical automated tools to gain access to a web application.
“Much of the security industry remains focused on traffic profiling via AI-driven anomaly detection,” said Fabian Partigliani, Chief Executive Officer at RedShield.
“As a result, traditional anomaly detection alone is no longer enough as a defence. In response to the escalation of DDoS and automated bot attacks, RedShield is introducing the ‘Third Horizon' as the next evolution of DDoS and bot protection.”
Practical barriers to bad actors
The Third Horizon introduces additional practical barriers to automated attacks. When deployed to protect an application, and RedShield’s controls detect suspicious activity, users seeking access to a web application must first provide a valid email address and then verify their identity via a code sent to that address. This adds friction and therefore cost to the attacker seeking to make automated attacks. While this may seem like a familiar two factor authentication approach, Third Horizon comes into play even when there is no existing user account.
“Third Horizon adds a layer of complexity that bad actors hate because it costs them more time, resources, and money,” says Partigliani. “There are no simple technologies available to let them create enormous volumes of fake user accounts and then retrieve and enter verification for each one. An attacker will typically go and find an easier target.”
Three layers of protection
RedShield’s protection operates on multiple horizons:
- First Horizon: Traffic Profiling: Blocking large volumetric attacks and obvious bad traffic. This is “table stakes” – necessary but not sufficient given the evolving attacks. RedShield uses “always on” volumetric protection from hyperscale cloud provider, AWS, to provide the best defence.
- Second Horizon: Sophisticated Bot Detection: Using advanced techniques to identify and block malicious bots that are trying to look legitimate. This raises attacker cost but is an ongoing arms race – determined attackers will find ways to evade detection.
- Third Horizon: Identity & Intent Challenge: When activity looks suspicious or systems are under particular strain, RedShield’s controls can challenge the user, asking for an email address and only enabling access to the site when a code included in an email sent to that address is entered. As mass automated bot attacks cannot readily respond to this challenge at scale, this significantly increases the complexity and cost for the attacker, protecting critical applications while prioritising availability for legitimate users.
According to the Imperva Bad Bot Report, almost half of all 2024 traffic was related to bot activity, with almost one third of the overall global traffic being connected to malicious bots. While attacks of greater than 1 terabit per second (Tbps) grew 1800% globally from Q3 to Q4 last year alone, a bigger concern is their sophistication. Bots mimic humans to take over accounts, scrape data, or overload specific functions like login pages or checkout processes. Attacks target APIs and business logic, putting New Zealand businesses at risks of operational disruption, data theft, and reputational damage.
RedShield’s service applies its three horizon approach and AWS’ global infrastructure to protect organisations from even these latest threats. RedShield’s Third Horizon will be available to customers in the coming weeks, on request, as an additional service for critical applications that need an extra layer of protection.
RedShield solutions are available on the AWS Marketplace.
About RedShield
For more information visit RedShield’s website and LinkedIn pages:
– https://www.redshield.co
– https://www.linkedin.com/company/redshield-security
