Filming Without Permission In New Zealand: Business Legal Risks

If you run a small business, filming can feel like a no-brainer. You might want CCTV for security, a few behind-the-scenes clips for social media, or footage of an in-store event.

But filming without permission in New Zealand can create real legal risk if you don’t set things up properly from day one. It can also damage trust with customers and staff, even if you had good intentions.

Note: This article is general information only and isn’t legal advice. If you’re dealing with a specific incident or complaint, it’s best to get tailored advice.

In this guide, we’ll break down what filming without permission usually means in a business context, when you can film lawfully, what New Zealand laws you need to keep in mind, and what practical steps you can take to stay compliant and protect your brand.

What Does “Filming Without Permission” Mean For A Business?

In everyday conversation, “filming without permission” can mean a few different things.

From a business perspective, the risk usually comes up when you:

• film customers, visitors, clients, or members of the public on your premises;
• film your staff in the workplace (including with CCTV);
• record audio as well as video (for example, recording conversations at a counter);
• use someone’s image or footage for marketing without clear consent;
• film in a place where a person would reasonably expect privacy (such as bathrooms or changing rooms).

It’s also worth separating two different issues:

1) Filming (The Act Of Capturing Footage)

This is about whether it’s lawful to record footage in the first place, and what notices, policies, and privacy steps you need.

2) Using Or Sharing Footage (What You Do With It After)

Even if you could lawfully film someone for security reasons, it doesn’t automatically mean you can post that footage online, use it in an advertisement, or share it with a third party.

As a rule of thumb: the more “personal” and identifiable the footage is, and the more public your use of it is, the more careful you need to be.

When Can Businesses Film Legally In New Zealand?

There isn’t a single “one-size-fits-all” answer. Whether filming without permission in New Zealand is lawful depends on context: where the filming happens, why you’re filming, what you’re capturing, and how you handle the footage.

Here are the most common business situations.

CCTV For Security And Safety

Many businesses can lawfully use CCTV, particularly where it’s genuinely for security, theft prevention, staff safety, or health and safety.

However, simply having CCTV isn’t a magic phrase that makes everything okay. To reduce risk, you generally want to make sure:

• you have a clear purpose (for example, deterring theft, investigating incidents, monitoring entry points);
• you only film what you need (avoid overly intrusive angles);
• you tell people (clear signage and/or written notice);
• you store footage securely and limit access;
• you have a sensible retention period (don’t keep footage forever “just in case”).

If CCTV is in a workplace, you’ll also want to consider your employment obligations and manage the relationship carefully. A good starting point is having clear policies and expectations (and making sure your team actually understands them), including an Employee privacy handbook where appropriate.

If you want a deeper dive on workplace surveillance specifically, Are Cameras Legal In The Workplace covers common issues businesses run into.

Filming For Marketing Or Social Media

This is where businesses often get caught out.

Filming “ambient” content in a public-facing space (like a café, gym, salon, or retail shop) can seem harmless, but if individuals are identifiable, you should think carefully about consent and expectations. The risk increases if:

• the footage focuses on a person (rather than a general crowd shot);
• the person is a child;
• the filming captures potentially sensitive information (like medical details, financial info, or private conversations);
• you’re using the footage in paid advertising (not just a quick story post);
• the person is in a situation where privacy is expected (like a fitness class where someone may feel exposed).

If you’re planning to use footage for promotional purposes, it’s often smart to get a written consent document, such as a Model release form or a tailored Photography video consent form (especially if you’re filming content you’ll publish online).

Filming Staff At Work

Filming employees creates a different layer of risk, because you’re dealing with:

• privacy obligations (personal information);
• employment law expectations (good faith and reasonableness);
• workplace culture and trust.

Even where CCTV is allowed, using it as a performance management tool without clear communication can quickly become contentious.

If you’re hiring staff or updating workplace policies, it’s worth making sure your expectations around filming, devices, and privacy are reflected in your Employment Contract and related workplace policies.

Audio Recording (Often Overlooked)

“Filming” often includes sound. From a risk perspective, recording audio tends to feel more intrusive than video, and it can raise separate legal and practical concerns.

For example, recording customer phone calls for training or quality assurance is common, but you should do it carefully and transparently. In New Zealand, recording rules can be nuanced (including when you’re a party to the conversation, versus recording other people). If your business records calls, this guide on Business call recording laws in New Zealand is a helpful reference point.

Which New Zealand Laws Matter For Filming Without Permission?

When business owners ask about filming without permission in New Zealand, they’re usually trying to understand “what law applies?”

In reality, several legal areas can overlap.

Privacy Act 2020 (Personal Information)

The Privacy Act 2020 is often front and centre because video footage can be “personal information” if it identifies (or could reasonably identify) a person.

For businesses, the practical takeaways are usually:

• Be clear about why you’re collecting footage. Don’t collect it “just because you can”.
• Tell people what’s going on. Signage and clear messaging matter.
• Only collect what you need. Avoid filming highly private areas.
• Secure it. Limit access, use passwords, and have a process for handling requests.
• Have a privacy framework. Many businesses should have a clear Privacy Policy that explains how personal information (including CCTV or event footage) is handled.

People can also ask to access personal information a business holds about them (with some exceptions). That can include CCTV footage where they’re identifiable. However, businesses may be allowed to withhold some or all footage in certain situations (for example, where releasing it would unreasonably impact another person’s privacy, or another withholding ground applies). So it’s important to know where footage is stored, who can retrieve it, and how long it’s kept.

Criminal Law Risks (Particularly Intimate Or Highly Private Filming)

Some filming crosses the line from “privacy issue” into serious wrongdoing.

For example, filming in bathrooms, changing rooms, or any situation involving intimate visual recordings is extremely high-risk and can involve criminal offences (including intimate visual recording offences under the Crimes Act 1961). Even if you think you’re installing cameras for safety, those locations are almost always inappropriate.

If your business operates a venue where people change clothes (like a gym, dance studio, swim school, or retail fitting rooms), it’s crucial to plan CCTV placement carefully and document your reasoning.

Harmful Digital Communications And Defamation (If Footage Is Shared)

Sometimes the biggest issue isn’t the filming itself, but what happens after.

If footage is published online and it humiliates someone, identifies them unfairly, or implies wrongdoing, you could face complaints and disputes (including under the Harmful Digital Communications Act 2015), or even defamation claims depending on what is said and the context.

This is especially relevant if you post “shoplifter” videos, “naming and shaming” content, or footage of customer disputes. Even if you feel wronged, posting someone’s face online can escalate things quickly.

Employment Law (Good Faith And Workplace Relations)

Where employees are involved, the “legal” question is often mixed with a “process” question.

Even if filming is arguably lawful under privacy principles, an employee may still challenge it if it was introduced without consultation, used unfairly, or handled in a way that undermines trust and confidence (including under good faith obligations in employment relationships).

That’s why the best approach is usually to be upfront, have clear written policies, and apply them consistently.

Trespass And Property Rights (Where Filming Happens)

Businesses also ask: “Can someone come onto my premises and film?”

If your premises are privately owned (even if open to the public), you generally have the right to set conditions of entry. In many cases, that includes rules about filming. If someone refuses to comply, you may be able to ask them to leave and consider formal trespass steps if necessary (including under the Trespass Act 1980).

The practical side matters here: clear signage and staff training make enforcement much easier.

A Practical Compliance Checklist For Businesses (So You Don’t Get Caught Out)

Legal compliance is much easier when you systemise it. Here are practical steps you can take to reduce risk and show you’re acting responsibly.

1) Decide Your Purpose Before You Film

Write down (even briefly) why you’re filming. Examples include:

• security and theft prevention;
• workplace health and safety;
• training (with appropriate controls);
• marketing content (with consent processes).

This helps you avoid “mission creep”, where footage collected for one reason is later used for another.

2) Use Clear Signage And “Just In Time” Notices

Signs at entrances are a great start, but don’t stop there.

If you’re filming for marketing, consider “just in time” notice too (for example, a sign at the counter saying filming is in progress today, or an announcement at the start of an event).

For bigger activations (like product launches or ticketed events), it’s common to include a filming clause in event terms, plus signage on the day.

3) Get Consent When It’s Marketing-Oriented Or Individual-Focused

If you’re filming a particular person (or a small identifiable group) for promotional content, consent is usually the sensible approach.

In practice, you can capture consent by:

• a signed form for planned shoots (often best);
• clear written consent via email/message (situationally);
• event registration terms (for crowd/event footage);
• verbal consent (less ideal, harder to prove later).

If you want something robust and easy to manage, a tailored Photography video consent form can make the process straightforward and consistent.

4) Be Careful In “High Privacy” Areas

As a business owner, it’s worth creating a simple internal rule:

• No filming in bathrooms, toilets, showers, and changing areas.
• Extra caution in treatment rooms, medical settings, counselling settings, and anywhere sensitive information is discussed.
• Be mindful around children and vulnerable people.

If you’re unsure whether an area is “high privacy”, a good question is: would a reasonable person be surprised or uncomfortable if they realised a camera was recording there?

5) Control Access, Storage, And Retention

Footage becomes a liability if it’s stored insecurely or kept longer than necessary.

Consider:

• Who can access footage (limit to managers/owners only where possible)?
• Are passwords strong and unique?
• Is footage stored with a reputable provider?
• How long is footage kept before it’s deleted/overwritten?
• Is there an audit trail for downloads/exports?

These steps also help if you ever need to respond to a privacy complaint or an access request.

6) Train Your Team (Because Most Issues Are Human, Not Technical)

A lot of “filming without permission” problems happen when a staff member posts something quickly on social media, or uses footage in a way that wasn’t intended.

It’s worth giving staff basic guidance on:

• when they can film customers (and when they can’t);
• what to do if a customer asks not to be filmed;
• how to respond if someone complains;
• who is allowed to post business content online.

Where staff roles include content creation, make sure expectations are documented clearly in writing.

What If Someone Films Your Business Without Permission?

Filming without permission in New Zealand isn’t only something businesses do - sometimes it’s done to businesses.

For example, you might have a customer filming staff during a dispute, a competitor filming your set-up, or someone recording inside your premises for social media content.

Here are practical steps you can take.

1) Check Whether They’re On Private Premises

If they’re inside your store, office, studio, or venue, you can generally set conditions of entry (including “no filming”). If they refuse to comply, you can ask them to leave.

If they don’t leave, you may consider trespass steps. It’s important your staff handle this calmly and safely, particularly if the person is aggressive.

2) Have A Simple “No Filming” Policy (If You Need One)

Not every business needs a blanket ban, but if you operate in a sensitive space (like health, wellness, childcare, or high-value retail), a clear rule can protect staff and customers.

If you introduce a policy, apply it consistently - selective enforcement can create friction and reputational issues.

3) Don’t Escalate By Posting Their Footage Back

It can be tempting to respond publicly if you feel someone has acted unfairly. But reposting footage, “calling them out”, or naming them online can expose your business to further legal and PR risk.

A safer approach is usually to document the incident internally, preserve any relevant CCTV, and get advice before publishing anything.

4) If It’s Serious, Get Tailored Legal Advice Early

Once footage is online, it can spread quickly. If the situation is high-stakes (for example, allegations against staff, misleading clips, or reputational damage), early advice can help you choose a response strategy that protects your business and avoids unintended legal consequences.

Key Takeaways

• Filming without permission in New Zealand can raise privacy, employment, and reputational risks for small businesses, especially where individuals are identifiable and footage is used publicly.
• CCTV for security is often lawful when it’s necessary, clearly signposted, limited in scope, and supported by secure storage and sensible retention practices.
• Marketing and social media filming usually requires a higher standard of care - if you’re focusing on identifiable individuals, getting written consent (such as a model or video consent form) is often the safest option.
• The Privacy Act 2020 is a key piece of the puzzle because footage can be “personal information”, which means you need a clear purpose, transparency, and good data handling practices.
• Workplace filming should be handled carefully with clear policies and communication, and ideally supported through your employment documentation and staff privacy processes.
• If someone films in your business without permission, you may be able to enforce conditions of entry on private premises, but it’s important to respond calmly and avoid escalating the situation online.

If you’d like help setting up clear filming consent processes, workplace policies, or privacy compliance for your business, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.