CCTV And Workplace Surveillance Laws In New Zealand

If you run a small business, CCTV can feel like a no-brainer. It can deter theft, help you investigate incidents, and give you peace of mind when you’re not on site.

But cameras in the workplace also come with legal responsibilities. If you get it wrong, you can create privacy risk, damage staff trust, and potentially expose your business to complaints (and in some cases, serious consequences).

This guide breaks down workplace CCTV surveillance laws in New Zealand in plain English, from a business owner’s perspective. We’ll cover what you can monitor, what you should tell your team, where cameras should (and shouldn’t) go, and the practical steps to set up workplace CCTV properly.

What Laws Apply To Workplace CCTV In New Zealand?

New Zealand doesn’t have one single “workplace surveillance act” that covers everything. Instead, CCTV and monitoring at work is mainly governed by a few key legal frameworks.

The Privacy Act 2020 (And The Privacy Principles)

If your CCTV captures footage of identifiable people (employees, customers, delivery drivers, contractors), you are collecting personal information. That means the Privacy Act 2020 applies, including the Information Privacy Principles (IPPs).

In practice, this usually means you should make sure:

• You have a lawful purpose for collecting the footage (e.g. security, safety, protecting property).
• You only collect what you need (don’t record areas that aren’t necessary for your purpose).
• People are informed that CCTV is operating (generally through signage and internal policies).
• You store footage securely and restrict access to those who genuinely need it.
• You don’t keep footage longer than necessary for the purpose you collected it for.
• You can respond appropriately to access requests (for example, if an employee asks for footage of themselves, or a customer asks for footage involving them).

Most CCTV compliance issues for small businesses come down to these basics: purpose, transparency, proportionality, secure storage, and sensible retention periods.

Employment Law (Fair Process And Trust & Confidence)

Even when CCTV is legally installed, workplace surveillance can still become an employment issue if it’s handled unfairly.

Employment relationships in NZ are built on good faith and a reasonable expectation of fairness. If you’re monitoring staff, the “how” matters just as much as the “why”. For example:

• Using surveillance footage unexpectedly in a disciplinary process can raise fairness concerns.
• Introducing CCTV without proper consultation can damage trust and lead to disputes.
• Overly intrusive monitoring can create a perception of constant supervision.

As a general rule, CCTV should be positioned and communicated as a security and safety tool (where that’s genuinely the purpose), rather than a “performance management” shortcut.

Where CCTV is linked to employment terms or workplace expectations, it’s often a good idea to align it with your Employment Contract and workplace policies, so expectations are clear from day one.

Health And Safety (When CCTV Supports Safety Controls)

Under the Health and Safety at Work Act 2015, you have duties to provide a safe workplace so far as is reasonably practicable.

CCTV can sometimes support your safety systems (for example, monitoring entry points, cash handling areas, after-hours work, or investigating incidents). But health and safety obligations don’t automatically justify “more surveillance everywhere”. You still need to balance safety measures with privacy and proportionality.

When Is Workplace CCTV “Allowed” (And When Does It Go Too Far)?

One of the most common questions we hear is: “Can I put cameras in my workplace?”

In many cases, yes. But “allowed” isn’t a free pass to install cameras anywhere and use footage however you like.

A good way to think about workplace CCTV surveillance laws is that CCTV is usually lawful when it is:

• For a genuine business purpose (security, theft prevention, safety, incident investigation).
• Reasonably necessary (there’s a clear reason for cameras in that area).
• Not excessively intrusive (it doesn’t monitor private spaces or record more than needed).
• Open and transparent (people are told it’s there and why).
• Handled responsibly (secure storage, limited access, appropriate retention and use).

Examples Of Common “Legitimate” CCTV Uses

Most small businesses use CCTV in predictable areas, such as:

• entrances and exits
• shop floors and customer service counters
• cash registers, tills, or back-of-house cash handling areas
• stock rooms and loading bays
• car parks and external building perimeters

These areas often have a clear security or safety justification, and people generally expect some level of monitoring.

Where CCTV Often Becomes Problematic

CCTV can cross the line when it captures footage in places where people have a strong expectation of privacy, or where the surveillance feels excessive compared to the risk you’re trying to manage.

Examples that are commonly high-risk include:

• bathrooms and changing rooms (generally a hard “no”)
• break rooms (especially if cameras feel like they’re monitoring downtime)
• close-up monitoring of individual workstations without a strong justification
• audio recording (this usually raises extra legal and trust issues)

If you’re considering monitoring that goes beyond standard security coverage, it’s worth getting advice first, because this is where complaints and employment disputes are more likely.

If you want a broader overview of this topic, including other surveillance methods, the rules in Are Cameras Legal In The Workplace are a helpful reference point for what’s typically acceptable.

Do You Have To Tell Employees About CCTV?

In most workplace scenarios, you should assume the answer is yes.

From a privacy perspective, one of the key themes is transparency: people should know when their personal information is being collected and why. From an employment perspective, open communication is often critical for maintaining trust and confidence.

How To Notify Staff (Practical Options)

For small businesses, staff notification is usually done through a combination of:

• CCTV signage at entrances and other monitored areas
• a written workplace policy on CCTV and monitoring
• employment contract clauses (where appropriate)
• an onboarding walkthrough so new team members understand what’s in place

It’s not just about saying “we have cameras”. You’ll also want to be clear about:

• what the cameras are for (security, safety, etc.)
• where cameras are located (at a high level)
• who can access footage and when
• how long footage is kept
• whether footage may be used in workplace investigations

Can You Ever Use “Covert” CCTV?

Covert CCTV (hidden cameras or surveillance that people don’t know about) is where things get particularly sensitive.

In general, covert CCTV is difficult to justify because it conflicts with transparency, good faith, and fairness. While there can be limited scenarios where it may be considered (for example, investigating a specific and serious suspected theft issue), this is typically a last resort and should be approached on a case-by-case basis.

It’s also important to understand the risk isn’t only a privacy complaint. Covert recording can create employment-law issues (for example, if it’s found to be unreasonable or undermines procedural fairness), and depending on how the surveillance is carried out, there may also be wider legal risks around how footage is obtained and whether it can appropriately be relied on in a dispute.

If you think covert recording is necessary, it’s wise to get tailored legal advice first, before installing anything or relying on any footage.

What About Audio Recording, Phone Recording, And Other Monitoring?

Many businesses start with CCTV and then consider other monitoring tools, like audio recording, call recording, GPS tracking, and computer/device monitoring.

The same “purpose, necessity, transparency, proportionality” mindset applies, but some types of monitoring tend to be higher risk.

Audio Recording Is Usually More Intrusive

Even if you’re comfortable with CCTV cameras, recording audio in the workplace often creates greater privacy sensitivity because conversations can reveal personal and sensitive information.

Audio recording can also raise additional legal issues beyond privacy, depending on the circumstances (for example, how and where the recording occurs). If you’re considering audio recording (or if your CCTV system captures audio), you should be especially cautious, ensure you have a strong justification, and put very clear notice in place.

For businesses that record calls with customers or clients, the rules can also intersect with privacy and expectations around consent. If you’re dealing with recorded calls, it’s worth reviewing the approach in Business Call Recording Laws In New Zealand and aligning your scripts, disclosures, and retention practices accordingly.

Computer And Device Monitoring

Workplace surveillance isn’t only cameras. Some businesses monitor:

• email usage and internet browsing
• logins and time tracking
• GPS locations for fleet vehicles
• work chat or ticketing systems

If you’re monitoring staff devices or systems, it helps to set expectations clearly and document them (ideally in a policy and in your employment documentation). If you collect personal information through these tools, your privacy compliance still matters.

This is where having a well-drafted Privacy Policy (and internal staff-facing privacy notices/policies) becomes part of good risk management, especially if you also collect customer data alongside workplace surveillance footage.

How To Set Up CCTV The “Right Way” (A Practical Compliance Checklist)

Once you decide CCTV makes sense for your business, the goal is to implement it in a way that’s legally compliant and easy to manage.

Here’s a practical checklist you can use.

1. Define Your Purpose (And Keep It Specific)

Start by writing down why you want CCTV. Common purposes include:

• preventing theft and loss
• protecting staff from aggressive behaviour
• monitoring access to restricted areas
• investigating incidents (safety, security, property damage)

The reason this matters is that your purpose should guide your camera placement, signage wording, retention period, and how you use footage later.

2. Place Cameras Proportionately

Position cameras so they capture what you need - not more.

For example:

• If your goal is to protect the till, you may not need to film the entire staff area.
• If your goal is to monitor the entrance, you may not need to record the neighbouring property or public footpath more than necessary.

A quick “privacy sense check” is helpful: if you were an employee or customer, would the camera placement feel reasonable for the stated purpose?

3. Put Up Clear Signage

Signage is one of the easiest ways to reduce legal risk because it supports transparency.

Your signage should generally be:

• easy to see before a person enters the monitored area
• worded simply (e.g. “CCTV in operation for security and safety”)
• supported by a more detailed internal policy if staff ask questions

4. Create A CCTV Policy (And Align It With Your Employment Documents)

For small businesses, a written policy is often the difference between “we have cameras” and “we have a system that’s actually defensible if something goes wrong”.

A good CCTV policy often covers:

• why CCTV is used
• where cameras are located
• whether the CCTV records audio
• who can access footage (and under what conditions)
• how footage is stored and protected
• how long footage is kept
• how footage may be used in investigations
• how you handle privacy requests for CCTV footage

This is also a good moment to review whether your Employment Contract and workplace policies are consistent with how your business operates in practice.

5. Set A Sensible Retention Period

Keeping footage “just in case” for months or years is rarely a good idea.

Instead, choose a retention period that matches your purpose. Many businesses use a rolling deletion cycle (for example, 14–30 days), unless footage is required for a specific incident or investigation.

If footage is kept longer because of an incident, make sure you document why and restrict access appropriately.

6. Secure The Footage (And Limit Access)

CCTV footage is personal information, so you should treat it like other sensitive business data.

Practical steps include:

• password-protecting access and changing default passwords
• restricting access to specific managers/owners only
• keeping an access log (especially if multiple people can view footage)
• not sharing footage informally (e.g. over social media or group chats)
• having a plan for what happens if footage is leaked or accessed improperly

If you’ve got contractors maintaining your CCTV system, make sure you’re comfortable with their access rights and that confidentiality expectations are clear.

7. Be Careful Using CCTV Footage In Disputes Or Disciplinary Processes

CCTV footage can become relevant in employment disputes, misconduct investigations, or health and safety investigations.

But it’s important to use it fairly. For example, if footage will be used in a disciplinary process, you’ll generally want to:

• ensure the employee has a chance to respond
• avoid “selective” use of footage that might be misleading
• consider whether the footage actually proves what you think it proves
• handle footage as confidential material

This is a common area where getting advice early can save you time and reduce risk, especially if you’re dealing with a high-stakes situation.

Key Takeaways

• CCTV in the workplace is usually legal in New Zealand, but it needs to be implemented and used responsibly under privacy and employment law principles.
• The Privacy Act 2020 applies to CCTV footage where individuals can be identified, so you should collect footage for a clear purpose, inform people, store it securely, and keep it only as long as necessary.
• Transparency matters - clear signage and staff communication will reduce risk and help maintain trust within your team.
• Avoid overly intrusive surveillance, especially in areas where people expect privacy (like bathrooms and changing spaces), and be cautious with audio recording.
• Have a clear CCTV policy and align it with your employment documentation, so you can confidently explain how surveillance works and how footage may be used if an incident occurs.
• Secure your footage and restrict access to prevent misuse, privacy breaches, and unnecessary disputes.

If you’d like help setting up workplace CCTV in a way that fits your business and still respects your legal obligations, we’re happy to help. You can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.