Mobile Phone Policy: Workplace Compliance In New Zealand

Mobile phones are part of doing business now. Your staff use them to check rosters, answer customers, confirm deliveries, run social media, and jump on urgent calls when something changes last minute.

But phones can also create real risks for a small business - privacy complaints, health and safety issues, time-wasting, confidential information leaks, and disputes about what you “can” and “can’t” ask an employee to do.

That’s where having a clear mobile phone policy comes in. Done properly, it sets expectations, protects your business, and helps you manage issues consistently (without turning every situation into a personal debate).

Below, we break down what a mobile phone policy should cover, what legal compliance looks like in New Zealand, and how to roll it out in a practical way that actually works in the real world.

Note: This article is general information only and isn’t legal advice. If you need guidance for your specific workplace, it’s worth getting tailored advice.

Why Your Small Business Needs A Mobile Phone Policy

Even if your team is small, a mobile phone policy matters because it gives you a fair, consistent framework to manage common workplace issues.

Without one, you’re relying on “common sense” (which is rarely common once there’s a complaint), and you may end up handling similar situations differently across staff - which can create risk if you later need to performance manage or discipline someone.

Common Issues A Mobile Phone Policy Helps Prevent

• Health and safety incidents (e.g. phone use around machinery, driving, forklifts, kitchens, construction sites).
• Productivity problems (excessive personal use during work time).
• Customer experience issues (staff scrolling while serving customers).
• Confidentiality and IP risks (photos of sensitive information, sharing client details, filming internal systems).
• Privacy complaints (recording calls or conversations, taking photos/videos of people at work).
• Disputes about reimbursements (staff using personal data plans for work, damage to personal devices).
• After-hours boundaries (expectations around responding to messages outside of work hours).

For many small businesses, the goal isn’t “no phones ever”. It’s making sure phone use is safe, appropriate, and consistent with your business needs.

Policies Work Best When They’re Part Of A Bigger Framework

A mobile phone policy often sits inside (or alongside) your broader Workplace Policy documents, plus your Employment Contract terms.

That way, expectations aren’t just “suggestions” - they’re part of the rules of your workplace from day one.

What New Zealand Laws Apply To Mobile Phone Rules At Work?

In New Zealand, there isn’t a single “mobile phone law” for workplaces. Instead, your approach to phone use at work needs to line up with a few key legal areas - especially privacy, health and safety, and fair employment processes.

Getting the balance right is important: you want enough control to protect the business, but not so heavy-handed that the policy becomes unenforceable (or creates unnecessary employee relations issues).

Privacy Act 2020 (Privacy, Monitoring, Photos, Recordings)

If your policy touches on things like monitoring, checking devices, taking photos/videos, or collecting personal information, you need to think about the Privacy Act 2020.

In practical terms, this means you should be able to answer questions like:

• What information might the business collect (e.g. call logs on a work phone, GPS location, device identifiers)?
• Why are you collecting it (what’s the legitimate business purpose)?
• How will staff be told about it (transparency is key)?
• How will it be stored and protected?
• Who can access it, and when?

If your team uses work phones, or you have BYOD (bring your own device) arrangements, it’s also a good idea to align expectations with an Privacy Policy (yes, this can apply internally too, not just for customers).

Where you’re dealing with workplace privacy in detail - like monitoring, searches, surveillance, and confidentiality - many businesses also formalise this through an Employee Privacy Handbook.

Health And Safety At Work Act 2015 (Phones And Safety-Critical Work)

If phone use creates a safety risk, you have obligations under the Health and Safety at Work Act 2015 to take reasonably practicable steps to eliminate or minimise that risk.

So, if your staff drive, operate machinery, work in warehouses, work around hot oil, or work on construction sites, your mobile phone policy should be stricter and very clear.

This is one of the areas where “we didn’t have a rule about it” isn’t a great defence if something goes wrong.

Employment Relations Act 2000 (Fair Process And Enforceability)

A mobile phone policy doesn’t give you unlimited power to discipline someone. The Employment Relations Act 2000 requires fair process and reasonableness.

That means, in practice:

• The rules should be clear and communicated.
• The rules should be reasonable for the role (a receptionist vs a forklift operator may need different rules).
• If you enforce the policy, you should do so consistently.
• If you’re considering disciplinary action, you generally need to follow a fair process (investigate, raise concerns, allow a response, consider explanations, then decide).

Other Legal Considerations (Recordings, Interception, And Surveillance)

Some phone-related issues (especially recording conversations, accessing communications, or using tracking/monitoring tools) can also raise other legal considerations beyond privacy - for example, criminal law concepts around interception/recording, and (in some situations) search and surveillance rules. The right answer often depends on exactly what’s being recorded/monitored, who is involved, and how it’s being done.

Because these areas can be fact-specific, it’s worth getting advice before you introduce call recording, start reviewing message content, or take steps to access data on an employee’s device.

Human Rights And Discrimination Considerations

Sometimes phone use intersects with health and disability. For example, an employee may need their phone accessible for medical reasons, family safety reasons, or accessibility tools.

A well-drafted mobile phone policy should allow for reasonable exceptions and a practical process for approving them, rather than a rigid “zero tolerance” rule that causes problems later.

What Should A Mobile Phone Policy Include?

A good mobile phone policy is practical, role-specific where needed, and clear enough that managers can apply it without guesswork.

Here are the clauses and topics we usually recommend considering for small businesses.

1) When Mobile Phones Can And Can’t Be Used

This is the heart of the policy. You want to spell out expectations for:

• Personal use during work time (e.g. only during breaks, or limited use if it doesn’t impact duties).
• Customer-facing roles (e.g. no personal phone use while serving customers).
• Safety-critical work (e.g. no phones while operating machinery or driving, except for emergencies and only when safely stopped).
• Meetings and confidential discussions (e.g. phones on silent, no recording).

You can also include guidance on what “reasonable personal use” means - because if you don’t define it, you’ll end up debating it.

2) Work Phones Vs Personal Phones (BYOD Rules)

Decide how your business handles devices. Common options include:

• Work phone provided (business owns and manages the device).
• BYOD (employee uses their personal phone for some work tasks).
• Hybrid (work phone for some roles, BYOD for others).

If you allow BYOD, your mobile phone policy should cover:

• What work apps must be used (and what permissions they require).
• Password/PIN requirements and basic security standards.
• What happens if the device is lost or stolen.
• How business information is separated (where possible) from personal content.
• Exit procedures (e.g. removing company accounts and data when employment ends).

It’s also smart to clarify costs: whether you reimburse any phone/data use, and what the process is.

3) Confidentiality And Data Security

Phones make it easy to copy, photograph, forward, or upload sensitive information. Your policy should spell out rules around:

• Taking photos/videos in the workplace (especially where customer or staff information may be visible).
• Sharing work information through personal messaging apps.
• Storing passwords, customer data, or client files on devices.
• Using public Wi-Fi for work systems.

For many businesses, these rules sit alongside an Acceptable Use Policy so it’s clear how staff can use devices and systems generally (not just phones).

4) Recording Calls, Conversations, Or Meetings

This is where small businesses can accidentally step into serious issues.

If staff might record calls (for example, for customer service or training), your policy should deal with:

• Whether recording is allowed at all.
• What notice/consent is required (to customers, suppliers, or other staff), and how that will be given.
• How recordings are stored, secured, and deleted.
• Who can access recordings and for what purpose.

This is closely connected to call recording laws considerations in New Zealand, so it’s worth getting the wording right for your specific setup.

5) Photos And Videos At Work (Including Social Media)

Even if your business loves social media, your staff filming in the workplace can create risk - especially if customers, children, or sensitive information are involved.

Your mobile phone policy can cover:

• When staff can take photos/videos for work purposes.
• Whether they need manager approval before posting.
• Rules around filming customers, other staff, or behind-the-scenes processes.
• How to handle customer objections.

If your workplace also uses CCTV or other monitoring, you’ll want consistency between your phone rules and your monitoring approach. (This often overlaps with questions like are cameras legal in the workplace.)

6) Emergencies And Accessibility

It’s a good idea to include an “emergency use” carve-out so you’re not policing common sense.

For example:

• Allowing staff to keep phones on them for urgent family situations.
• Setting a process for notifying a manager if an employee expects an urgent call.
• Recognising accessibility needs (for example, medical alerts or assistive technology).

This helps keep the policy reasonable and human - which also makes it easier to enforce when there’s genuine misuse.

7) Consequences Of Breaches

Be careful here: a policy shouldn’t promise you’ll automatically dismiss someone for a breach.

Instead, it’s usually better to say that breaches may lead to disciplinary action, depending on:

• The seriousness of the breach (e.g. safety incident vs minor personal browsing).
• Whether it was repeated after warnings.
• The employee’s role and responsibilities.
• Any mitigating circumstances.

This keeps things aligned with fair process and avoids locking you into an unrealistic response.

How Do You Roll Out And Enforce A Mobile Phone Policy Fairly?

Even a well-written mobile phone policy can fall over if it’s introduced badly or enforced inconsistently.

Here’s a practical approach that usually works for small businesses.

Step 1: Match The Policy To The Reality Of Your Workplace

A retail store, a café, a construction site, and an office-based consultancy will all need different rules.

Before finalising the policy, ask yourself:

• Which roles can reasonably use phones for work tasks?
• Where are the safety-critical areas?
• What confidentiality risks exist (client lists, pricing, patient info, financial data, etc.)?
• Do you expect staff to answer messages after hours?

This helps you avoid a policy that’s so strict it gets ignored (or so vague it’s useless).

Step 2: Introduce It Properly (And Keep Evidence)

You should make sure staff actually receive the policy and understand it. Practical steps include:

• Providing the policy during onboarding.
• Running a short toolbox talk/team meeting to explain the “why”.
• Having employees acknowledge they’ve read it (signature or HR system acknowledgement).

That last step matters more than people think - especially if you later need to rely on the policy for performance management.

Step 3: Apply It Consistently (Or Explain Why You’re Not)

Consistency is one of the biggest factors in whether a policy protects you or backfires.

If one team member gets warned for phone use while another is allowed to scroll all day, you’re building a credibility problem (and potentially a legal problem if you escalate action later).

If there are exceptions (e.g. a role that needs phone access, or an employee with an agreed accommodation), document them so the distinction is clear.

Step 4: If There’s A Breach, Follow A Fair Process

When a breach happens, it’s tempting to react quickly - but employment processes in New Zealand need to be fair.

Common “best practice” steps include:

• Investigate (what happened, when, who was affected, any evidence).
• Raise the concern with the employee and provide details.
• Give them a chance to respond (there may be context you don’t know).
• Consider the response with an open mind.
• Decide on an outcome proportionate to the issue.

If you want your policies and contracts to support enforceability, it’s also worth ensuring your broader employment documents are in good shape, including your Employment Contract and any wider Workplace Policy suite.

Tricky Situations: What Small Businesses Should Watch Out For

Most mobile phone issues are straightforward. But a few scenarios come up regularly where it’s worth slowing down and getting advice.

Can You Ban Phones Completely?

Sometimes - but it depends on the role and whether a total ban is reasonable.

For example, banning phones on a factory floor or construction site may be justified due to safety risks. But banning phones for all staff at all times (including breaks) may be harder to justify and could create unnecessary conflict.

A more practical approach is often “phones away during work time, accessible on breaks”, with stricter rules in high-risk zones.

Can You Search An Employee’s Phone?

This is sensitive. If the phone is a personal device, searching it can raise privacy issues quickly (and may also raise other legal issues depending on what access is involved and how it’s done). Even with a work phone, you should be cautious and have clear rules about what the business can access and why.

As a general rule, it’s safest to deal with access upfront in writing: what data the business can access on work devices, what monitoring occurs (if any), and what happens under BYOD. In many BYOD setups, employers focus on securing and accessing business accounts or business-managed apps (rather than the employee’s entire personal device), and use clear exit procedures to remove business data when employment ends.

If this is a real risk area for your business (e.g. sensitive client data, regulated industries, high confidentiality), it’s usually worth putting a clear framework in place up front through an Employee Privacy Handbook and tailored advice.

What If Staff Are Taking Photos Or Videos At Work?

This can be a confidentiality issue, a privacy issue, or both.

Your mobile phone policy should make it clear when filming is allowed, who approves it, and what’s off-limits (customers, other staff, restricted areas, whiteboards, client files, etc.).

If you also use CCTV, aim for consistency across your approach to workplace recording and monitoring.

What About Phones And Customer Data?

If staff access customer data on phones (work or personal), treat it as a real privacy/security risk. Your policy should include practical safeguards, such as:

• Not saving customer details to personal contacts.
• Using approved systems rather than personal messaging accounts.
• Password/PIN protection and auto-lock timeframes.
• A process for reporting lost/stolen devices quickly.

This is where having an Acceptable Use Policy and a well-thought-out Privacy Policy can help your overall compliance framework stay consistent.

Key Takeaways

• A clear mobile phone policy helps you manage productivity, customer experience, confidentiality, and safety risks consistently across your workplace.
• Your policy should align with key legal obligations, including the Privacy Act 2020, the Health and Safety at Work Act 2015, and fair process requirements under the Employment Relations Act 2000.
• Include practical rules on when phones can be used, safety-critical restrictions, work phone vs BYOD expectations, confidentiality and data security, and rules around recording or filming.
• Don’t rely on a policy alone - it should work together with your Employment Contract and broader workplace policies so expectations are clear from day one.
• Roll the policy out properly (with clear communication and acknowledgement) and enforce it consistently to reduce disputes and protect your position if issues escalate.
• Be careful with high-risk areas like accessing devices, recording calls, or staff filming at work - these can raise privacy and other legal issues quickly and may need tailored legal advice.

If you’d like help putting a mobile phone policy in place (or reviewing your employment documents to make sure everything works together), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.