What the FMA's 2026 AI guidance means for NZ brokerages

The FMA's March 2026 guidance on AI in financial advice landed with less noise than it deserved. For NZ brokerages running AI tooling — and that's most of you, even if you haven't called it that — the guidance reshapes three obligations that were previously implicit.

Obligation 1: Auditability of automated decisions

If an automated system contributed to a recommendation a customer received, the brokerage must be able to reconstruct the inputs, the model version, and the reasoning chain. This is the obligation that hash-chained audit ledgers solve. A flat log won't survive the post-incident review.

Obligation 2: Human override at the binding decision

AI may draft, recommend, summarise, even speak to a customer in voice. But a binding decision — issuing a quote at a specific premium, accepting a claim, refusing cover — must surface to a named human, with the inputs the AI used, before it's recorded against the customer's policy.

Obligation 3: Customer consent on AI handling

Voice cloning, automated triage, sentiment analysis — any AI handling that materially shapes the customer's experience needs a recorded consent moment. Annual policy renewals are the obvious place. Mid-cycle changes also count.

What to do this quarter

• Inventory every AI touchpoint in your current stack. Email triage, voicemail summary, calendar AI, even Gmail's compose suggestions — they all count.
• Get your audit logging into a tamper-evident shape. If you can't show a regulator the inputs to a decision you made last March, you have work to do.
• Add an AI-consent clause to your engagement letters. Templates are coming out of the IBANZ working group; we'll link ours below when it's finalised.
• Train your front-line brokers on the override moments. AI drafts; a named human binds.

If this sounds like a lot of operational work, it is — but it's also why the operational layer matters. Bob ships every one of these obligations on day one for our tenants. It's the difference between treating compliance as paperwork and treating it as product.