CCTV With Audio In New Zealand: Legal Risks And Privacy Compliance Tips

If you’re running a café, retail store, gym, warehouse, clinic, or office, CCTV can feel like a no-brainer. It helps deter theft, supports health and safety, and can clear up disputes when something goes wrong.

But once you add audio recording into the mix, the legal risk goes up fast.

In New Zealand, using CCTV that records audio isn’t automatically illegal. But it can create serious privacy and employment issues if you don’t set it up carefully. Because audio can capture sensitive or private information, you’ll usually need a stronger justification than you would for video alone.

This guide explains what CCTV with audio in New Zealand means from a business owner’s perspective, the key legal risks to watch for, and practical compliance tips to help you implement surveillance in a way that’s fair, transparent, and defensible. This article is general information only and isn’t legal advice - if you’re considering covert recording, recording in sensitive spaces, or using recordings in an employment process, it’s worth getting tailored advice.

What Counts As CCTV With Audio (And Why It’s Higher Risk)

When people say “CCTV”, they often mean video-only surveillance. But many modern systems record more than just footage.

CCTV with audio could include:

• security cameras that record sound through a built-in microphone
• camera systems paired with intercoms or two-way audio
• IP cameras that can be configured to record audio (even if you didn’t mean to enable it)
• body-worn cameras used by staff that record both video and sound

Audio generally attracts more scrutiny because it can capture:

• private conversations between customers (including medical, financial or personal details)
• employee conversations (including union discussions, complaints, personal matters, or sensitive workplace issues)
• information you didn’t intend to collect (which creates extra data-handling obligations)

So while CCTV video might be justified by obvious reasons (security, safety, theft prevention), audio recording often needs a clearer business purpose and stronger privacy safeguards.

Is CCTV With Audio Legal In New Zealand?

There isn’t a single “CCTV Act” that says yes or no. Instead, the legality of CCTV with audio in New Zealand usually turns on whether you’ve complied with:

• Privacy Act 2020 (how you collect, use, store and disclose personal information)
• employment law obligations (good faith, fair process, and not unreasonably intruding into employees’ privacy)
• health and safety duties (if surveillance is being used to manage risks, incidents, or unsafe behaviour)
• other laws that may apply depending on how the audio is captured (for example, rules around recording private communications and whether people have been properly informed)

In practice, CCTV with audio is more likely to be lawful where:

• there is a genuine need for audio (not just “nice to have”)
• people are clearly informed audio is being recorded
• the recording is limited (only where needed, only for as long as needed)
• access is restricted and the footage/audio is handled securely

It is more likely to be risky where:

• audio is recorded “by default” without a specific purpose
• people aren’t clearly notified (or signage only mentions cameras, not sound)
• recording occurs in areas where privacy is expected (like bathrooms, changing rooms, break rooms, counselling rooms, or staff-only spaces used for private conversations)
• the audio is used to monitor performance or “keep tabs” on staff without a fair process

If you’re considering audio-enabled cameras, it’s worth doing a quick risk assessment first (and checking your system settings). Many businesses accidentally record audio because the feature is turned on out of the box.

The Key Legal Risks For Businesses Using CCTV With Audio

Adding audio changes your risk profile. Here are the most common legal trouble spots we see for small businesses.

1) Privacy Act 2020 Compliance Issues

Audio recording will often involve collecting personal information (and sometimes sensitive personal information). Under the Privacy Act 2020, you need to be able to justify collection and handle that information properly.

Common privacy risks include:

• collecting more than necessary (e.g. recording every customer conversation at the counter when your real goal is preventing theft)
• not telling people (or not telling them clearly enough) that audio is being recorded
• keeping recordings too long without a retention policy
• letting too many people access recordings (especially if the system has a shared password)
• using recordings for a new purpose that wasn’t disclosed (e.g. using security audio to discipline staff for unrelated issues)

As a starting point, it often helps to have a clear Privacy Policy (and a short CCTV notice) so your approach is documented and consistent.

2) Employment Relationship Problems

Even if your main concern is customer theft or site security, CCTV with audio can quickly become an employment issue if it captures staff conversations.

From an employment law perspective, the big risks include:

• not acting in good faith (for example, secretly adding audio to “catch out” employees)
• unfair monitoring (surveillance that feels excessive, intrusive, or targeted)
• poor disciplinary process (trying to use recordings without having clear policies, or without giving staff an opportunity to respond)
• inconsistent practices (only reviewing audio when you want to find fault, rather than for genuine security incidents)

It’s usually smart to align CCTV practices with your wider workplace documentation, like your Employment Contract terms and any staff handbook policies about monitoring, privacy, and technology use.

3) Reputational Risk And Customer Trust

Even if you can technically justify audio recording, customers may react badly if they feel they’re being listened to while shopping, dining, or waiting for a service.

This is especially true if you operate a business where sensitive details are often discussed, like:

• health and wellness services
• legal or financial services
• education and tutoring
• any business handling vulnerable customers

A “privacy compliant” setup isn’t only about avoiding complaints. It’s also about building trust and avoiding awkward conversations at the counter when someone notices a microphone icon on the camera.

4) Data Security And Breach Risk

CCTV systems are data systems. If they’re cloud-based, accessible remotely, or managed by a third-party provider, you need to think about cybersecurity and access control.

If audio/video footage is leaked, hacked, or improperly shared, you could be dealing with:

• a privacy complaint
• a notifiable privacy breach (depending on the harm and circumstances)
• employment grievances
• significant reputational damage

In other words, adding audio isn’t just a collection decision. It increases the importance of having good security settings and clear internal rules.

How To Set Up CCTV With Audio The Right Way (A Practical Compliance Checklist)

If you’ve decided CCTV with audio is necessary for your business, the goal is to build a setup that’s defensible, proportionate, and transparent.

Here’s a practical checklist you can work through.

1) Be Clear About Your Purpose (And Keep It Narrow)

Before installing (or enabling) audio, write down exactly why you need it. This sounds basic, but it’s one of the most important steps for privacy compliance.

Examples of stronger purposes might include:

• recording threats or abusive behaviour toward staff in a high-risk environment
• capturing evidence of serious incidents where audio is necessary context (e.g. violent incidents)
• monitoring a high-risk area where staff safety is a real concern and less intrusive options won’t work

Examples of weaker purposes include:

• general curiosity about what customers say
• checking whether staff “sound busy”
• using audio as a productivity tool

If you can achieve your goal with video-only CCTV, that’s often the safer option.

2) Use the Least Intrusive Setup You Can

Privacy compliance isn’t just “have a policy”. It’s also about system design.

Practical ways to reduce intrusion include:

• turning audio off in areas where it’s not essential
• limiting coverage to entrances, point-of-sale areas, or specific high-risk locations
• avoiding staff-only private spaces (break rooms and meeting rooms are often a bad idea for audio)
• setting short retention periods unless an incident is flagged

If your system provider offers “audio on demand” (only activated in specific circumstances), it may be easier to justify than constant recording.

3) Notify People Properly (Signage And Policies)

If you’re using CCTV with audio, you generally want to make sure people know it’s happening before they enter the recorded area.

Good notification usually includes:

• clear signage at entrances stating that audio and video recording is in use
• a short explanation of the purpose (e.g. safety and security)
• who to contact if someone has questions about recordings

It also helps to back this up with written documentation (for example, privacy information available at the counter or on your website). Many businesses also add CCTV clauses into their staff onboarding documents so expectations are clear from day one.

4) Set Rules For Access, Storage, And Retention

Even if you’ve collected recordings lawfully, you still need to handle them responsibly.

As a baseline, consider:

• access controls: limit access to specific roles (not “any supervisor”)
• audit trails: keep a log of who accessed recordings and why
• retention periods: decide how long you keep footage/audio (and stick to it)
• secure storage: use strong passwords, MFA, and avoid shared logins
• deletion processes: ensure recordings are actually deleted when your retention period ends

If you engage a third-party provider, you should be clear on who owns the data, where it is stored (including whether it’s offshore), and what happens if you change providers.

5) Be Careful Using CCTV Audio For Performance Or Discipline

One of the easiest ways to create disputes is to collect recordings for “security”, then later use them for something else.

If you’re reviewing CCTV audio for employee performance, consider:

• Is it consistent with the purpose you told staff and customers?
• Is it fair and reasonable in the circumstances?
• Have you given the employee a chance to respond to what the recording shows?
• Are there less intrusive ways to address the issue?

If you’re moving into performance-management territory, you’ll usually want to proceed carefully and ensure you’re following a fair process. This is also where having properly drafted workplace documentation and policies can save you a lot of time (and stress) later.

Special Situations: Where CCTV With Audio Can Get You Into Trouble Fast

Some situations are more legally sensitive than others. If any of these apply to your business, it’s worth getting advice before you turn audio recording on.

Recording In Areas With Higher Expectations Of Privacy

As a general rule, you should avoid placing surveillance (especially audio) in locations where people reasonably expect privacy.

Examples include:

• bathrooms and changing rooms (generally a no-go)
• staff break rooms
• private meeting rooms used for confidential discussions
• consulting rooms where customers discuss sensitive information

If you need security coverage in sensitive areas (like entrances near bathrooms), you’ll want to design camera angles carefully and consider whether audio is necessary at all.

Using Audio To Record Customer Complaints Or Disputes

Some businesses like the idea of audio recording at the counter so they can “prove what was said” in a dispute.

That might sound practical, but it can easily lead to collecting a lot of unnecessary information about customers (and staff). If your main concern is reducing disputes, you may be better protected by having strong terms and clear written customer communications instead.

Depending on your business model, it can also help to have properly drafted Business Terms so expectations around refunds, cancellations, liability and complaints are clear from the start.

Audio Recording And Call Recording Confusion

Businesses sometimes mix up CCTV audio recording with phone call recording.

They’re different risk profiles, and each needs its own compliance approach. If your business records calls (for bookings, sales, or customer support), you should treat that as a separate compliance project and make sure you’ve got appropriate notification and privacy settings in place. (If you do both, your privacy documentation should address both.)

When You’re Unsure If Your System Is Recording Audio

This is more common than you’d think.

If you’ve installed cameras and you’re not 100% sure whether audio is enabled, it’s worth checking immediately. Accidental audio collection can still create privacy issues, especially if you haven’t notified customers or staff.

A quick practical step: ask your installer to confirm in writing whether audio is enabled, where it’s enabled, and how to disable it (and keep a record of that).

Key Takeaways

• CCTV with audio in New Zealand isn’t automatically illegal, but it comes with higher privacy and employment-law risk than video-only surveillance.
• Under the Privacy Act 2020, you should only collect audio if you have a clear, lawful purpose and the recording is necessary and proportionate.
• Transparency is crucial: clear signage and internal policies should explicitly state that audio (not just video) is being recorded.
• Reduce risk by limiting where audio is recorded, restricting access to recordings, using secure storage, and keeping recordings only as long as needed.
• Be especially cautious in areas where people expect privacy (like break rooms, meeting rooms, consultation rooms, bathrooms and changing areas).
• If you plan to rely on recordings in disputes, make sure your documentation is also doing the heavy lifting, such as a clear Privacy Policy and well-drafted Business Terms.

If you’d like help reviewing your surveillance setup, privacy compliance approach, or workplace documentation, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.