Bag Search Rights And Obligations For NZ Retailers

If you run a retail store, you’ve probably dealt with (or worried about) suspected shoplifting. It’s frustrating, it can be costly, and it can put you and your staff in a tough spot in the moment.

One of the most common questions we hear is: what do bag search laws actually allow in New Zealand? Can you ask to check a customer’s bag? What if they refuse? Can you stop them from leaving?

This guide breaks down bag search laws for NZ retailers in plain English, so you can protect your stock while also avoiding legal and reputational risk.

Are Bag Searches Legal In New Zealand Retail Stores?

In most cases, you can ask a customer to open their bag for inspection - but there’s an important catch:

• You generally can’t force it.
• You generally can’t physically search someone’s bag yourself without consent.
• You need to be careful about stopping someone from leaving.

In New Zealand, powers to search (and compel cooperation) are usually reserved for the Police and other enforcement agencies under laws like the Search and Surveillance Act 2012. Retail staff typically don’t have those statutory search powers.

So practically, “bag searches” in a retail setting rely on:

• Consent (the customer agrees to show you what’s in their bag), and/or
• Conditions of entry (your store sets expectations like “bags may be inspected on exit”, which can support your request - but still doesn’t automatically give you a right to use force or detain someone).

That’s why the best approach is to treat bag checks as a request supported by good signage, good staff training, and a consistent process.

What Rights Do Retailers Actually Have When They Suspect Shoplifting?

When you suspect theft, it’s tempting to “take control” of the situation. But your legal options are narrower than many business owners expect - and a misstep can quickly turn a stock loss into a complaint, a police issue, or even a civil claim.

1) You Can Ask Questions And Make A Request

You can usually:

• Ask the customer to return to the counter
• Ask whether they have paid for certain items
• Ask to see a receipt
• Ask them to open a bag for you to look inside (or for them to show you what’s inside)

It often helps to keep the language calm and non-accusatory. For example: “It looks like an item may not have been scanned - would you mind showing me inside your bag so we can clear this up?”

2) You Can Set Store Rules (But They Need To Be Sensible)

You can create store policies like:

• “Large bags must be left at the counter”
• “Bags may be checked on exit”
• “We reserve the right to refuse entry”

These rules are usually enforced through refusing entry or asking someone to leave - not through forcing a search.

Having a clear written Workplace Policy can help your team apply these rules consistently (which matters a lot if you ever need to justify why a customer was approached).

3) You May Be Able To Ask Someone To Leave (And Use Trespass)

If someone refuses to comply with reasonable store rules, is disruptive, or you believe they’ve stolen from you, you can generally ask them to leave. If needed, you may be able to issue a trespass notice under the Trespass Act 1980.

The details matter here - especially around how the notice is given, who has authority to give it, what happens if the person refuses to leave, and when to call Police - so it’s worth getting advice on your specific scenario.

4) Detaining Someone Is High-Risk

This is where many retailers get caught out.

Even if you strongly suspect shoplifting, physically stopping someone from leaving (blocking exits, grabbing bags, restraining them, or locking doors) can expose your business to allegations such as:

• assault
• false imprisonment / unlawful detention
• privacy complaints or reputational damage

There are limited situations where a retailer (or member of the public) may lawfully arrest someone (often referred to as “citizen’s arrest”), but the rules are strict and fact-specific. If you get it wrong, it can become a serious legal issue. For many small retailers, the safer approach is: do not detain; instead, record the incident, preserve evidence, and contact Police.

Consent, Signage, And “Conditions Of Entry”: How To Make Bag Checks Safer

If your approach to bag checks is built around consent, you dramatically reduce legal risk.

Here’s how to set your store up so bag checks are more likely to be lawful, effective, and calm.

Use Clear (And Visible) Signage

Signage won’t magically give you police-style powers, but it can help by:

• setting expectations before a customer enters
• supporting the reasonableness of your request
• discouraging theft in the first place

Signage should be easy to read, placed at entrances (and ideally at exits), and written in neutral, professional wording.

Examples:

• “For the safety of our staff and customers, we may ask to inspect bags on exit.”
• “Large bags may be required to be left at the counter.”
• “If you do not wish to comply, please speak with our manager.”

Avoid overly aggressive signs that imply you will force a search or prevent someone from leaving, because that can create conflict and may misrepresent what you can legally do.

Make The Bag Check Process About The Bag, Not The Person

A major legal and reputational risk for retailers is inconsistency - especially if customers feel they were targeted based on personal characteristics (race, age, disability, gender, etc.).

To reduce that risk, have a process that is as objective as possible, for example:

• Only check bags of a certain size (e.g. backpacks, large tote bags)
• Only check bags when the store alarm triggers
• Only check bags where staff observed specific behaviour (and document what it was)

The goal is to be able to say: “This is our standard approach” - not “we made a snap judgement”.

Train Staff On What To Say (And What Not To Say)

Staff should know the difference between:

• a polite request (“Would you mind opening your bag?”), and
• a demand implying compulsion (“Open your bag now or you can’t leave.”)

If you employ staff, your expectations should be reflected in your Employment Contract and your internal policies, so everyone understands the limits of their role and how to escalate to a manager.

Privacy And Evidence: Cameras, Record-Keeping, And Customer Information

Most retailers don’t rely on bag checks alone. You’ll often use CCTV, incident reports, and sometimes communications with security providers.

That’s where your privacy obligations kick in.

CCTV In Store: You Can Use It, But Do It Properly

CCTV is commonly used to deter theft and help investigate incidents, but you need to think about:

• notifying customers (usually signage)
• where cameras point (avoid private areas like bathrooms)
• who can access footage
• how long you keep recordings
• how you respond to requests for footage

If you’re unsure about the line between effective loss prevention and privacy risk, it’s worth reading up on Are Cameras Legal In The Workplace - many of the same principles apply when cameras capture both staff and customers.

Privacy Act 2020: Don’t Collect More Than You Need

If you collect personal information during an incident (for example, a name, phone number, vehicle rego, or an image), you should have a clear reason and handle it responsibly.

In broad terms, the Privacy Act 2020 expects you to:

• only collect information you actually need
• tell people (where reasonable) what you’re collecting and why
• store it securely
• only use or disclose it for a proper purpose

For many retailers, having a clear Privacy Policy is an easy “from day one” step that supports how you handle CCTV, incident records, and customer communications.

Keep Incident Reports Factual

If a situation escalates and you later need to talk to Police, your landlord, a shopping centre manager, or your insurer, good notes matter.

We recommend a simple incident report that records:

• date and time
• who was involved (staff names; customer description if needed)
• what was observed (facts only)
• what was said (as close as possible to exact wording)
• what action was taken (asked to open bag; refused; left store; Police called)
• whether there is supporting evidence (CCTV timestamps, receipts, photos)

A structured approach like a Customer Injury Report can be a useful model for documenting incidents clearly and consistently (even when the incident is theft-related rather than injury-related).

Staff Safety And De-Escalation: Your Health & Safety Duties

Bag checks aren’t just a legal question - they’re also a safety issue.

Under the Health and Safety at Work Act 2015, you have duties to take reasonably practicable steps to keep workers safe. If your staff are put into confrontational situations, that can become a work health and safety risk you need to manage.

Practical Ways To Reduce Risk

For many small retailers, the safest loss-prevention approach focuses on deterrence and de-escalation, not confrontation. That might include:

• Having at least two staff present if a bag check is requested
• Training staff to stay calm, keep distance, and avoid physical contact
• Having a clear “call the manager” escalation pathway
• Using CCTV signage and visible staff presence as deterrents
• Adopting a “do not pursue outside the store” rule

Be Careful With Security Guards And Contractors

If you engage external security or contractors, make sure roles and limits are clearly documented. Who is authorised to ask for a bag check? Who can issue a trespass notice? Who calls Police?

It’s also important that your staff understand what information can be shared internally about incidents. An Employee Privacy Handbook can help set clear expectations around CCTV access, incident notes, and handling personal information in a compliant way.

How To Create A Bag Search Policy That Actually Works (Without Creating Legal Risk)

Retailers often try to solve bag search laws with a single sign at the door. But what really protects your business is a repeatable, staff-friendly process.

Here’s a practical framework you can tailor for your store.

Step 1: Decide When Bag Checks Will Happen

Pick a trigger that is consistent and defensible. Common options include:

• When the alarm/gates trigger
• When staff have observed a specific behaviour (e.g. concealment)
• For all backpacks/large bags at exit (if resourced to apply consistently)

What you want to avoid is a vague approach like “when someone looks suspicious”, because that leads to inconsistency and complaints.

Step 2: Set A “Consent-First” Script

Give staff a simple script that:

• makes a polite request
• explains the reason (briefly)
• offers a manager escalation
• allows the customer to refuse without things becoming physical

For example:

• “Hi there - our alarm went off. Would you mind opening your bag so we can quickly confirm everything’s been paid for?”
• “If you’d prefer, I can ask the manager to come over.”

Step 3: Decide What Happens If They Refuse

This is the key part. Your policy should be clear about what staff should do if the customer refuses a bag check.

Often, the safest options are:

• do not physically stop them
• ask them to wait while Police are called (but recognise they may leave)
• document the incident and preserve CCTV
• consider trespass for repeat offenders

The right approach depends on your store layout, staffing, location, risk tolerance, and whether you operate in a centre with security support - so this is a good place to get tailored advice.

Step 4: Keep Your Policy And Training Up To Date

Policies are only useful if your team understands them. If you have new staff, casuals, or seasonal workers, build bag-check training into onboarding.

And if an incident goes badly (customer complaint, escalation, staff injury), treat it as a signal to review your approach.

Key Takeaways

• In New Zealand, retailers generally can’t force a bag search - you can usually ask, but consent is key.
• Clear signage and consistent processes can support your right to request a bag check and reduce conflict at the door.
• Detaining customers is high-risk and can expose your business to serious allegations (even if you strongly suspect theft).
• Privacy still applies - especially if you use CCTV, keep incident records, or collect identifying information under the Privacy Act 2020.
• Staff safety matters - your loss-prevention approach should include de-escalation and health and safety considerations.
• A written policy and training help you apply bag checks fairly and avoid inconsistent treatment that can trigger complaints.

If you’d like help setting up a legally sound bag check process, reviewing your signage and policies, or handling an incident that’s escalated, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.