Is It Legal To Have Workplace Cameras And Surveillance?

Yes, workplace cameras can be legal in New Zealand, but only if they're reasonable, necessary for a clear business purpose, and handled fairly under the Privacy Act 2020 and employment law. In most workplaces, that means clear notice, sensible camera placement, limited access to footage, and no recording in private areas like bathrooms or changing rooms.

It's completely normal to want more visibility over what is happening in your workplace. Maybe stock has gone missing, you're worried about health and safety incidents, or your team deals with aggressive customers. At the same time, cameras, audio recording, GPS tracking and device monitoring can feel personal for staff, so the way you set them up matters just as much as the equipment you choose.

Is It Legal To Have Cameras In The Workplace In New Zealand?

In many cases, yes. Workplace cameras are generally allowed where they're connected to a legitimate business need and you use them in a fair, transparent and proportionate way.

Even if you own the premises and the CCTV system, employees still have privacy rights at work. The practical test is whether your monitoring is reasonable, necessary and proportionate to the problem you're trying to solve.

Workplace cameras are most likely to be lawful where:

• there's a clear purpose, such as theft prevention, workplace safety, customer aggression, access control or incident investigation;
• staff, contractors, customers and visitors are told, or it's clearly obvious, that cameras are operating;
• cameras are placed in appropriate locations, not in toilets, bathrooms, changing rooms, showers or other highly private spaces;
• the footage collected is no more than you reasonably need for that purpose;
• recordings are kept secure and only accessed by authorised people for a genuine reason; and
• footage is deleted after a sensible retention period, unless it's needed for an actual incident or investigation.

Workplace surveillance isn't limited to CCTV. It can also include audio recording, phone call recording, GPS tracking, computer and device monitoring, access card logs, time and attendance systems and vehicle telematics. What matters isn't just what you monitor, but how you justify it, communicate it and manage the information you collect.

What Laws Apply To Workplace Cameras And Surveillance?

New Zealand doesn't have one single workplace surveillance Act that covers every situation. Your obligations usually come from privacy law, employment law principles, health and safety duties, and in some cases the terms of your employment agreements and workplace policies.

Privacy Act 2020 And The Privacy Principles

Workplace surveillance usually involves collecting personal information about employees, contractors, customers or visitors. CCTV footage of an identifiable person, GPS logs showing where a worker has been, and audio recordings of calls can all be personal information.

Under the Privacy Act 2020, you should be able to show that:

• You have a lawful and necessary purpose for collecting the footage or monitoring data.
• You collect information fairly and transparently, which usually means telling people before or at the time you collect it.
• You don't collect more than you need. For example, filming an entire lunchroom because you're worried about cash drawer shortages will usually be hard to justify.
• You keep information secure, including using passwords, access controls and secure cloud settings.
• You don't keep information longer than necessary for the purpose you collected it.
• You use it for the purpose you collected it, or a closely related purpose that staff could reasonably expect.
• You're careful with overseas storage or providers, especially if footage is cloud-hosted or accessed through a third-party platform.

This is where a clear Privacy Policy and staff-facing privacy notice can make a big difference. They help explain what you collect, why you collect it, who may access it, how long it is kept and how people can raise questions.

Employment Relations Act 2000 And Good Faith

Even if surveillance is acceptable from a privacy perspective, it can still create employment risk if you use it unfairly. New Zealand employment relationships include duties of good faith. In practice, that means you should be open about important workplace policies, avoid misleading staff about monitoring, and use footage fairly if it becomes relevant to misconduct or performance concerns.

If you plan to rely on surveillance in a disciplinary process, your expectations should be clear in your Employment Contract and workplace policies. You'll also need a fair process before making any disciplinary decision.

Health And Safety At Work Act 2015

Cameras are sometimes installed for health and safety reasons, such as monitoring a hazardous area, protecting staff from violence, reviewing near misses or managing lone-worker risks. Those reasons can be legitimate, but safety isn't a blank cheque. You still need to limit surveillance to what is reasonably needed and avoid excessive monitoring.

Can Workplace Cameras Record Audio?

Workplace cameras shouldn't record audio by default. Audio is usually more intrusive than video because it captures the content of conversations, not just movement in a monitored area.

Audio recording may be appropriate in some businesses, especially for phone calls or customer service channels, but you need a strong reason and very clear notice. For example, a customer helpline might record calls for training, quality and dispute resolution, with an automated message before the call continues.

If you're considering audio recording in a physical workplace, be especially cautious about:

• recording private conversations between employees;
• capturing conversations in break areas, meeting rooms or staff rooms;
• using audio secretly;
• recording more than is needed for your business purpose; and
• storing audio files without strict access controls.

As a practical rule, don't secretly record private conversations you aren't part of. If call recording is part of your business model, make sure your notice, scripts, privacy documents and retention settings line up. For a deeper look at phone recording rules, see our guide to Call Recording.

GPS Tracking Employees Laws NZ

GPS tracking of employees can be lawful in New Zealand, but it needs the same privacy and fairness discipline as CCTV. The fact that a tracker is in a work vehicle or work device doesn't mean you can monitor a person at all times without limits.

GPS tracking is usually easier to justify where it's used for:

• dispatching drivers or field staff efficiently;
• confirming delivery routes and job attendance;
• protecting lone workers;
• locating company vehicles or equipment;
• investigating a specific safety or security incident; or
• meeting client or operational requirements that have been explained to staff.

Higher-risk GPS practices include tracking outside work hours, tracking personal vehicles without a strong reason, monitoring workers minute by minute for performance without warning, or using location history for a purpose you never told staff about.

If a company vehicle is also used privately, you should explain whether tracking continues outside work hours and whether staff can turn it off for approved personal use. If tracking contractors, make sure the arrangement is properly documented. The legal distinction between employees and contractors can depend on the real nature of the working relationship, so heavy GPS control can make a contractor relationship look and feel more like employment. Your agreement and operating practices should be consistent.

When Are Workplace Cameras High Risk Or Unlawful?

Workplace surveillance becomes risky when it's excessive, secretive, poorly explained, or disconnected from a genuine business need.

Hidden Cameras And Covert Surveillance

Covert surveillance is high risk. It may only be justifiable in very limited circumstances, such as a serious and specific concern where open monitoring would defeat the purpose and less intrusive options aren't enough. Even then, the scope, location, duration, approval process and documentation all matter.

If you suspect theft or serious misconduct, don't treat hidden cameras as the first step. Consider whether you can address the issue through stock controls, access logs, roster checks, ordinary CCTV, manager supervision or a targeted investigation. Covert recording can trigger privacy complaints and can undermine any later employment process if it was unfairly obtained.

Cameras In Private Areas

Cameras shouldn't be installed in toilets, bathrooms, changing rooms, showers or areas used for personal care or medical needs. Staff have a strong expectation of privacy in those spaces.

Even in staff-only areas like lunchrooms and break rooms, think carefully. If your concern is stock loss, a camera covering the stockroom door is likely to be less intrusive than filming where staff eat and relax.

Using Cameras For Performance Management Without Boundaries

Using cameras to protect people and property is different from using them to micromanage how often someone chats, sits down or takes a break. If the real issue is performance, it's usually better to set clear expectations, provide training, give feedback and follow a fair performance process.

That doesn't mean footage can never be relevant to performance or misconduct. It means your policy should explain when footage may be reviewed and you shouldn't use surveillance in a way that feels like a hidden trap.

How To Set Up Workplace Cameras The Right Way

A good CCTV setup is a compliance project, not just a hardware install. Use this checklist before you switch cameras on, or when you're fixing an existing system.

1. Define The Purpose: Write down exactly why you need cameras, such as till security, staff safety, access control or incident investigation.
2. Map Camera Locations: Match each camera to the purpose and avoid capturing more than you need.
3. Check For Private Areas: Remove or reposition any camera that captures toilets, changing rooms, break areas or private conversations unnecessarily.
4. Consult Where Appropriate: Tell staff what you're proposing, why, where cameras will be, and how footage will be used.
5. Put Up Clear Signage: Use signs at entrances and near monitored areas so employees, customers and visitors are aware.
6. Update Staff Documents: Align employment agreements, onboarding materials and workplace policies with your surveillance practices.
7. Limit Access: Decide who can view, export or delete footage, and keep a simple access log showing who accessed footage, when and why.
8. Set Retention Periods: Keep routine footage only as long as reasonably needed, and keep incident footage separately only where there's a real need.
9. Secure The System: Use strong passwords, multi-factor authentication where available, restricted admin access and regular provider checks.
10. Review Regularly: Reassess whether each camera is still needed, especially after layout changes, staff complaints or new technology.

Many CCTV systems are cloud-based or accessed through mobile apps. That makes security settings important. Check where footage is stored, whether it may be stored offshore, who at the provider can access it, and what happens if there's a data breach. If surveillance is part of your wider risk management, it may sit alongside an Information Security Policy and a Data Breach Response Plan.

CCTV Workplace Policy: What To Include

A CCTV or workplace surveillance policy helps turn your good intentions into a clear process. It also makes it much easier to respond if an employee asks, "Why are you recording me?" or "Who looked at that footage?"

A lawyer should tailor your policy to your workplace, systems and employment documents, but a useful outline usually includes:

1. Purpose: Explain the business reasons for surveillance, such as safety, security, access control or incident investigation.
2. Types Of Monitoring: List CCTV, audio recording, GPS tracking, device monitoring or access logs that apply.
3. Locations And Scope: Identify monitored areas and any areas that won't be monitored.
4. Notice And Signage: Explain how staff, contractors, customers and visitors are told about monitoring.
5. Access To Footage: Name the roles that can access recordings and the reasons access is allowed.
6. Use Of Footage: Explain when footage may be used for safety, security, complaints, investigations or employment processes.
7. Retention And Deletion: Set routine retention periods and rules for keeping incident footage longer.
8. Security Measures: Cover passwords, permissions, cloud storage, exports and sharing restrictions.
9. Requests And Concerns: Tell staff how to ask questions, request access where appropriate, or raise privacy concerns.
10. Review Process: Set a review cycle so the policy stays aligned with your technology and workplace layout.

You may also need a Privacy Collection Notice for customers and visitors, especially if you operate a shop, reception area, gym, clinic, warehouse pickup counter or other customer-facing site. If your existing policies don't mention cameras, update them before relying on footage in an employment process.

If you're reviewing your broader business compliance, our legal health check can help you spot common gaps across privacy, contracts, employment and intellectual property.

Worked Example: Retail Stock Loss And Staff Notice

Imagine you run a small Auckland retail store with 8 employees. Over 6 weeks, your stocktake shows $4,800 of missing high-value stock from a cabinet near the counter. You want CCTV because the loss is now material, but you also want to avoid creating a tense workplace.

A proportionate approach could look like this:

• You document the purpose: preventing and investigating stock loss around the high-value cabinet and till area.
• You install 2 cameras, one covering the cabinet and one covering the till, rather than filming the whole shop floor, staffroom and back office.
• You don't install audio recording because video is enough to meet the purpose.
• You put signs at the front entrance and counter saying CCTV is operating for safety and security.
• You update your staff policy and tell the team before the system goes live, including who can access footage and when it may be reviewed.
• You set routine footage deletion after 21 days, unless footage is needed for an identified incident.
• You restrict access to the owner and store manager and keep a log each time footage is viewed.

Two weeks later, the store manager reviews footage for a specific time window after another stock discrepancy. The footage shows an employee putting unpaid stock into a personal bag. You can usually use that footage as part of a disciplinary process, but you still need to act fairly. That means telling the employee the allegation, giving them access to the relevant evidence, allowing them a reasonable opportunity to respond with a support person if they wish, and keeping an open mind before deciding the outcome.

The result is a much stronger position than if you had secretly installed a camera in the staffroom, kept footage indefinitely, and used it to comment on staff behaviour unrelated to stock loss.

Key Takeaways

• Workplace cameras can be legal in New Zealand if they're reasonable, necessary, proportionate and clearly communicated.
• The Privacy Act 2020 is central because CCTV, GPS logs, audio files and monitoring data often identify employees, contractors, customers or visitors.
• Audio recording and covert surveillance are higher risk than ordinary CCTV and should only be used where there's a strong, clearly documented reason.
• GPS tracking employees can be lawful, but you should avoid unnecessary tracking outside work hours and clearly explain how location data will be used.
• A good CCTV workplace policy should cover purpose, locations, notice, access, retention, security and how footage may be used in investigations.
• If you rely on footage for disciplinary action, you still need a fair employment process and your use of footage should match what staff were told.

If you'd like help with CCTV workplace policies, privacy notices, employment contract updates or GPS tracking terms, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.