🇳🇿New Zealand eSIM: Zero SIM Mentions in Two Telecom Laws

12 plans for New Zealand, from 1 GB at $3.99 to 20 GB at $27.99, plus 6 unlimited-data tiers. 5 GB for 30 days costs $11.99 — 2nd cheapest of 7 in Oceania, against a $28.99 median. Our retail prices from the operator catalogue, checked 28 September 2026.

Does this apply to you? (neither Act says the word)

eSIM New Zealand is Nzcom’s data-only profile on the Spark network — the catalog itself won’t settle whether that network is 5G or LTE — and neither the Telecommunications Act 2001 nor the Telecommunications (Interception Capability and Security) Act 2013 (TICSA) ever uses the word “SIM” (Subscriber Identity Module) in its text. You install a New Zealand eSIM before you fly, and neither of the two Acts governing telecommunications asks who you are.

A whole-word, case-insensitive search for “SIM” returns zero hits in the Telecommunications Act 2001 and zero in TICSA 2013. As a substring, “sim” returns 14 hits in the 2001 Act and 3 in TICSA, all inside one word: “similar”.

That is a full-text count across two statutes, not a claim that no search turns up anything close. Search “do I need ID for an NZ SIM” and you will likely land on a different word: identity. It appears six times in the 2001 Act and once in TICSA, whole word each time. The next sections give the count, then where those seven sit, and why none of them is about buying a card.

Two statutes are not the whole of New Zealand law. The 2001 Act is the general industry statute. TICSA 2013 governs interception capability and network security. That covers what a network operator must hand over to the state, and how it must secure its network. Together they are the two places a SIM-identity duty would most plausibly sit. Commerce Commission rules and carrier sale terms were not read for this page; see “Where our reading stops,” below.

Both portal pages carry the same marking: In force, Latest version, as at 1 October 2025, with no historical-version warning. Both were fetched from legislation.govt.nz and checked 17 August 2026. The eSIM for New Zealand in this catalog runs on Spark, sold by reseller Nzcom, data-only. Full pricing sits under “What you get,” further down.

What two Acts contain, counted

Four phrases that would signal a duty to identify a SIM buyer return zero hits, in both Acts' full text. Only three phrases return a hit at all, and two of those are traps.

These are case-insensitive counts, run against the files as saved on 17 August 2026. The files are markdown copies that embed every cross-reference URL inline, which is why the Act reads 1,146,610 characters here but 883,787 with those addresses stripped. TICSA is 216,051 as saved, 168,766 text-only. “SIM,” “sim,” “identity” and “subscriber” all sit in running text, never inside a link. Stripping the cross-reference URLs changes none of the counts in the table. Open either Act at legislation.govt.nz and run the searches yourself. The portal won’t match this character count, only the text.

Search “SIM” as a whole word, not as a substring, or you will count a different law entirely. A bare, case-insensitive search for the letters “sim” returns 14 hits in the 2001 Act and 3 in TICSA. Every one of those 17 hits sits inside a single word: similar. We enumerated every word containing that letter sequence in both files: “similar exemption,” “similar conduct,” “similar technical amendments,” and so on. Similar is the only word there is. No other word carrying “sim” exists in either Act. Run the count the way a searcher usually does, without the word boundary, and the law looks like it mentions a SIM fourteen times. It does not mention one at all.

The same trap runs in reverse for “subscriber”. Six hits in the Telecommunications Act 2001, zero in TICSA. Every one of the six is “subscriber line” or “digital subscriber line access multiplexer”. That is a copper pair running to a wall socket, not a customer’s identity. In New Zealand telecom law, “subscriber” names a wire.

Six places “identity” appears in the Telecommunications Act — and none is your SIM

All six hits of “identity” in the Telecommunications Act 2001 belong to one duty, and it is not the customer’s. A network operator’s own staff, a technician on your land, must carry proof of who they are and produce it on request. The table below totals all six.

Section 133, Production of authority, reads in full.

“Every officer, employee, or agent of a network operator who enters land or a road under section 132 must— (a) carry evidence of his or her authority and identity, which must be produced on request; or (b) work under the immediate control of a person who holds evidence of that person’s authority and identity, which must be produced if requested.”

Section 132 is a narrow emergency power: removing a tree, shrub or plant that threatens a line. Both “identity” hits inside section 133 describe the same technician. One clause covers the worker doing the job; the other covers whoever they answer to.

The same duty repeats three more times, in near-identical wording. Section 126 covers routine work on an existing line. It requires the same words — “the person entering must produce evidence of his or her authority and identity” — on entry, and again if asked later. Section 124 sets the same duty for staff entering under a District Court order made under section 121. Sections 155Z and 155ZE were added to the Act on 9 June 2017. They extend the same duty to staff installing or maintaining fibre under a statutory right of access.

Read across all six, the Act asks one identity question, and it never asks a customer. Can the person standing on your land prove who they work for? Nobody selling a SIM appears in any of the six.

TICSA’s one hit, and why the interception law matters more than the main one

TICSA is not a side statute. It governs how the state intercepts telecommunications and secures networks. That is exactly the place a duty to identify a SIM buyer would sit, if New Zealand had one. It carries a single hit for “identity,” and it is not about a customer either.

Section 47(4), inside Areas of specified security interest, defines a term used elsewhere in the Act.

“authentication credentials means any information (for example, passwords or usernames) used to ascertain the identity of a user, process, or device”

That is a login credential — a password or a username — not a document checked at a shop counter.

The silence carries more weight here than in the 2001 Act. A general industry statute saying nothing about SIM identity could just mean the drafters never turned their mind to it. An interception-and-security statute saying nothing is a different kind of silence. TICSA sets out how a network operator must register. It also sets out what a network operator must disclose to a surveillance agency. It sets out what counts as a network security risk. It is the statute built to carry an identity-verification duty, if Parliament wanted one attached to buying a SIM. For a retail SIM buyer, it does not.

TICSA defines “customer” once, in section 3:

“customer means a person who receives telecommunications services from, and has an account or billing relationship with, a network operator”

Most uses of that word fit the definition without naming anyone. A headcount or an aggregate a network operator reports is not a name captured at a shop counter. Section 47(1)(c)(i) treats “aggregated information about a significant number of customers” as an area of specified security interest — aggregated, not individual.

One section breaks the pattern. Section 23 requires a network operator to tell the Registrar “the names of all existing customers” and “the names of any new customer”. Those are real names, reported to a government office. Read alone, that looks like SIM-buyer registration. It is not. Section 23 covers a network operator that “provides an infrastructure-level service” to another provider. Section 3 defines that term.

“infrastructure-level service means any service that provides the physical medium over which telecommunications are transmitted (for example, optical fibre cable), but does not include the device or equipment that generates, transmits, or receives any telecommunication signal”

The customer named there is another company buying fibre capacity, not a person buying a SIM at a shop counter.

No provision in either Act requires reporting a retail subscriber’s name — checked against both. TICSA’s section 23 is the closest thing in either statute, and it names a company, not a shopper. The Telecommunications Act 2001 comes closer still. Section 69P, “Register of non-retail users,” requires the Commission to “maintain a register of users”. That register does carry names. Section 69Q(1)(b) gives the Commission power to “remove the names of users from the register” — the same register, maintained under section 69P. Its caption is the answer: non-retail. The register lets Chorus, the network company, supply certain businesses without breaching the retail-supply restriction in section 69O. The names on it belong to those businesses, never to someone buying a SIM.

The other trap: “register” means the phone company, not you

The closest thing to a registration duty in either Act belongs to the network operator, not the SIM buyer. Part 4, Subpart 1 of TICSA — sections 60 to 71 — requires every network operator to register with a government Registrar. Spark, One NZ and 2degrees are New Zealand’s known operators and would fall under that duty. This page did not open the register itself to confirm who is listed.

Section 60 sets the deadline two ways: three months from commencement, for an operator already trading, and three months from becoming one, for anyone later.

Section 62 lists what goes on that register: eleven fields in total. It opens with the operator’s name, an interception contact and a separate network-security contact. The interception contact is the employee who fields surveillance-agency issues about interception capability or a warrant. Paragraph (d) reads, verbatim: “the total number of the network operator’s customers” — a count, not a name. The other seven are housekeeping: end-user counts, wholesale connections, coverage area, outsourcing deals, service types, a notice address, and which interception duty applies. One field does hold a name. The outsourcing entry names the firms on both sides of a deal. None of the eleven is a subscriber’s name, address or ID document.

“Register” in TICSA is a company-level filing, made once by the carrier and updated annually under section 69. It answers a different question from what most searchers mean by SIM registration. No answer to that second question sits in either Act’s own text.

Where our reading stops

This page checked two national statutes — not every rule a regulator or a carrier could apply to a SIM.

Commerce Commission rules were not read for this page. If a registration duty exists anywhere in New Zealand telecom regulation outside these two Acts, that is where to look next. It is not here.

This page does not say New Zealand collects no data on subscribers. TICSA’s Parts 2 and 3 set real duties. A network operator must be able to assist a lawful interception and disclose specified security risks to the Director. Both were read for this page. They answer what a network operator must be capable of once interception is authorised. They do not answer whether a document gets checked before an eSIM activates.

Spark, One NZ and 2degrees each publish their own sale terms — commercial, not law. Neither those nor the Privacy Act 2020 were read for this page. Only the reprint each portal marks in force, as at 1 October 2025, was checked; an earlier reprint might read differently.

What you get: Nzcom on Spark

The eSIM for New Zealand in this catalog is data-only, sold by reseller Nzcom, roaming on the Spark network. KYC is not required. The APN sets itself automatically.

The catalog disagrees with itself on network generation, and this page does not pick a side. The coverage field names Spark at 5G. The operator’s own description, in the same catalog entry, opens with “LTE Data-only eSIM” — checked 17 August 2026, still unresolved. Treat the generation as unclear.

The profile is rechargeable, with no stated expiry on top-ups, and the install window runs 365 days from purchase.

No tier carries voice minutes or SMS — the profile is data-only.

Before you fly, and on landing

Install the profile before departure, on Wi-Fi. The QR code needs a working connection to finish, and a connection right after landing is not guaranteed.

Nothing switches on at install; a profile showing installed but inactive before boarding is normal for a data-only eSIM.

Running it alongside a home SIM works on any dual-SIM phone. Set the new eSIM as the data line. Turn off cellular data — not the whole line — on the home SIM. That way nothing pulls a roaming charge by accident.

Because the catalog does not confirm the generation, leave the phone’s network mode on automatic rather than forcing 5G-only or LTE-only.

Installing an eSIM for New Zealand follows the same steps as any other. The iPhone install guide and the Android install guide cover the QR-scan and manual-entry paths. For Airalo’s track record elsewhere, see the Airalo review.

FAQ

Sources and freshness

This page checked two statutes at legislation.govt.nz: the Telecommunications Act 2001 (2001 No 103) and TICSA 2013 (2013 No 91). Both were saved and read in full on 17 August 2026. Both portal pages carry the same marking: In force, Latest version, as at 1 October 2025, with no historical-version warning.

As saved, the 2001 Act runs 1,146,610 characters and TICSA runs 216,051 (883,787 and 168,766 with cross-reference URLs stripped, as above). Reproducible, case-insensitive counts hold whether run as a whole word or as a substring. “SIM” is 0/0, “identity” is 6/1, “subscriber” is 6/0 (Act 2001 only, all “subscriber line”). The bare substring “sim” returns 14/3, all inside the single word “similar” — see the trap above. Two counts this page located but does not state: the TICSA “regist” word family, and the Act 2001 “[Repealed]” tag family. Each gave a different total on each of three independent recounts. The file opens with a navigation column, then a table of contents. Each duplicates every heading, and where that boundary is drawn changes the total. Both counts are cited to statute sections instead, in “The other trap,” above.

This page did not read Commerce Commission rules, the Privacy Act 2020, or the sale terms published by Spark, One NZ or 2degrees. It did not check whether an earlier reprint read differently.

Plan and network details come from Airalo’s own catalog data for New Zealand, checked 17 August 2026. That includes the open 5G/LTE conflict above. Prices are as charged on this site on the same date, not pulled from Airalo’s catalog copy. Both can change without notice.

Sources cited only — expert review pending. For individualized advice, consult a licensed professional.