New Zealand Privacy Law: Biometrics and the Privacy Act

New Zealand privacy law is built on the Privacy Act 2020 and its information privacy principles, and it is being extended to new technologies like facial recognition. This section covers the newer privacy rules; the full Privacy Act overview lives in our world-laws guide.

This is general information about New Zealand law, not legal advice. For your own situation, consult a lawyer or your local Community Law centre.

Privacy guides

This section covers the Biometric Processing Privacy Code and what it means for facial recognition in retail and security settings. For the full Privacy Act 2020 framework and mandatory breach notification, see our New Zealand data privacy laws guide, and for the wider picture the New Zealand law guide.

Frequently Asked Questions

What is the Biometric Processing Privacy Code in New Zealand?

It is a code issued by the Office of the Privacy Commissioner under the Privacy Act 2020, in force from 3 November 2025, that sets specific rules for organisations collecting and using biometric information such as facial recognition, fingerprints, and voiceprints. It adds proportionality, transparency, and use-limit requirements on top of the standard information privacy principles.