Workplace Camera Laws In New Zealand: Employer Compliance

If you run a small business, workplace cameras can feel like a straightforward way to protect your premises, deter theft, and keep your team safe.

But once you start recording people at work, you’re stepping into a legal area that can involve privacy, employment obligations, health and safety, and (in some situations) criminal law.

This guide breaks down workplace camera laws in New Zealand from an employer perspective, so you can set up cameras with a clear purpose, good processes, and fewer legal headaches down the track.

Why Businesses Use Workplace Cameras (And Why The “Why” Matters Legally)

Before you choose camera locations or buy equipment, start with the most important compliance step: define your purpose.

In practice, the “why” behind surveillance often determines whether your approach is reasonable, proportionate, and lawful.

Common legitimate reasons to use cameras

• Security and loss prevention (e.g. retail theft, vandalism, after-hours break-ins).
• Health and safety monitoring in higher-risk environments (e.g. a warehouse loading zone) to help investigate incidents.
• Protecting staff from aggression or violence (e.g. front counter environments, late-night operations).
• Investigating specific incidents where there is a genuine reason to suspect misconduct (more on this below).

Why the purpose matters

If you can’t clearly explain why you’re recording, it’s harder to justify:

• why cameras are needed at all (instead of less intrusive options),
• why they’re placed where they are,
• why you’re retaining footage for a certain period, and
• who gets to view it.

From a compliance standpoint, “we want to keep an eye on people” is usually a bad starting point. A better approach is: “we use cameras to manage identifiable security or safety risks, and we do it in a way that respects privacy and employment obligations.”

If you want a deeper overview of the general rules, it can help to read Are Cameras Legal In The Workplace alongside this employer-focused checklist.

What Laws Apply To Workplace Camera Laws In New Zealand?

There isn’t one single “CCTV Act” for businesses. Instead, workplace surveillance is governed by a mix of legal obligations that overlap.

Privacy Act 2020 (and the privacy principles)

If your cameras record identifiable individuals (employees, contractors, customers, delivery drivers), you’re likely collecting personal information. That pulls you into the Privacy Act 2020 and its privacy principles.

In plain language, you’ll usually need to ensure:

• You have a lawful purpose for collecting the footage.
• You collect it in a fair way (covert surveillance is high risk and should only be considered in limited circumstances with specific advice).
• You’re transparent about what you’re doing (often via signage and workplace policies).
• You keep footage secure and only allow access where necessary.
• You don’t keep it longer than needed.
• You respond appropriately to access requests (people may ask for their personal information).

A practical step many businesses take is making sure their Privacy Policy and internal privacy practices match how cameras are actually used on-site.

Employment Relations Act 2000 (good faith + fairness)

If you employ staff, your decisions about cameras can become employment-law issues very quickly.

As an employer, you’re expected to act in good faith. That typically means:

• being open and communicative about changes that affect employees,
• giving staff a fair opportunity to raise concerns where appropriate (especially if you’re introducing new monitoring or changing how existing footage is used), and
• not undermining trust and confidence through unnecessary or overly intrusive surveillance.

It also means if you ever plan to rely on footage for performance management or disciplinary action, you’ll want to be confident the footage was collected and handled fairly.

Health and Safety at Work Act 2015

Sometimes cameras are introduced as part of your health and safety controls (for example, monitoring a high-risk area or investigating incidents).

While cameras can support a safer workplace, they shouldn’t replace basic health and safety systems, training, supervision, and proper incident response processes. If you’re using footage as part of your safety approach, keep it documented and consistent with your wider safety systems.

Human Rights Act 1993 and anti-discrimination risks

Be careful that camera use (and the way footage is used) doesn’t create discriminatory outcomes. For example, targeting surveillance at particular workers without a legitimate, non-discriminatory reason can create risk.

Audio recording and call recording considerations (higher risk)

Some workplace camera systems capture audio as well as video, and some workplaces separately record calls (for example, customer service lines).

Audio recording often raises higher privacy and legal risks than video. In some situations, recording conversations can also trigger criminal-law issues (for example, if you’re recording private communications you’re not a party to). If you’re recording audio, you should be very clear on:

• whether audio is genuinely necessary for your purpose,
• how you notify people (employees and others who may be recorded), and
• how you restrict access and retention.

If your setup includes call recording, it’s worth checking your approach against the practical issues covered in Business Call Recording Laws In New Zealand.

Where Can You Put Cameras (And Where Should You Avoid Them)?

For most small businesses, the biggest legal problems come from placement and over-collection (recording more than you reasonably need).

Lower-risk camera locations

These areas are commonly defensible because they’re tied to security, safety, or operational risk:

• entry/exit points (front door, loading bay, staff entrance),
• cash handling areas (POS counters, safes, back office cash rooms),
• stock rooms and warehouses,
• car parks and exterior building perimeter,
• high-risk machinery zones (where safety incidents may occur).

High-risk camera locations (usually avoid)

These areas are where people have a strong expectation of privacy. Cameras here are hard to justify and often create immediate compliance risk:

• bathrooms and toilets,
• changing rooms,
• showers,
• private lactation/parent rooms (if applicable).

Even in staff break rooms, placement should be carefully considered. If the purpose is security, you might be able to cover entry points rather than recording the entire area where staff relax.

What about cameras aimed at “staff performance”?

This is where things can get tricky.

Using cameras primarily to monitor productivity (for example, tracking how often staff stop working or how long they spend talking) can be viewed as disproportionate and damaging to trust, and may create employment risks if it isn’t handled carefully.

If you do want to use footage for performance-related purposes, it’s safer when:

• it’s clearly disclosed upfront,
• it’s genuinely linked to legitimate business needs (e.g. safety compliance in a hazardous zone),
• it’s supported by policies and employment documentation, and
• you still use fair performance processes (not “gotcha” surveillance).

Can you install hidden cameras?

As a general rule, hidden cameras are high risk.

There are situations where covert surveillance might be raised (for example, investigating serious misconduct where notifying staff would genuinely undermine the investigation). But this is one of those areas where getting specific legal advice is important, because the facts matter and the consequences can be significant if it’s handled poorly.

It’s also important to understand that certain types of covert filming (especially in places where people may be undressing or where there’s a high expectation of privacy) can create serious criminal liability risks (for example, “intimate” recordings), on top of privacy and employment issues.

How To Introduce Workplace Cameras The Right Way (A Practical Compliance Checklist)

If you want to comply with workplace camera laws in New Zealand, you need more than hardware. You need a documented, consistent process.

Step 1: Do a quick “privacy and reasonableness” sense-check

Ask yourself:

• What specific problem are we trying to solve?
• Is a camera necessary, or would a less intrusive option work (better locks, duress alarms, better lighting, staffing changes)?
• Are we placing cameras only where needed?
• Who will be recorded (employees, customers, neighbouring businesses)?

If your cameras capture areas beyond your premises (like parts of the street or a neighbouring tenancy), that’s another reason to check your setup carefully.

Step 2: Communicate with staff early (don’t surprise them)

Even when you’re allowed to have cameras, rolling them out with no warning is where disputes start.

Give staff a clear explanation of:

• why cameras are being installed,
• where they’ll be located,
• whether they record audio,
• who can view footage and when, and
• how long footage will be kept.

Whether you need formal “consultation” depends on your circumstances (including what’s in employment agreements, workplace policies, and how significant the change is). But as a practical risk-management step, early communication and a chance for staff to ask questions will usually put you in a much better position.

For many small businesses, this communication is best supported by a written Workplace Policy and consistent onboarding practices.

Step 3: Put the rules in writing (policy + employment documents)

Your documentation should match what you actually do in practice.

Depending on your business, you may want your camera rules to sit within:

• your privacy practices and notices,
• your workplace policies (including disciplinary and investigation processes), and
• your employment documentation, like an Employment Contract (where relevant and appropriate).

Many employers also find it helpful to keep an internal guide on staff privacy and handling personal information, such as an Employee Privacy Handbook, so managers don’t have to guess what’s allowed when an issue comes up.

Step 4: Use signage and clear notices

Signage is a simple but powerful compliance step. It helps show you’re collecting footage transparently (rather than secretly).

Good signage is typically:

• visible before a person enters the recorded area,
• easy to understand (plain language), and
• consistent with what you’re actually recording.

Step 5: Decide who has access (and keep it tight)

Footage should be accessed on a “need to know” basis.

In small businesses, a common approach is:

• 1–2 nominated managers have access,
• access is password protected (and ideally uses multi-factor authentication),
• viewing and exporting footage is logged where possible, and
• footage is only used for the purpose it was collected for.

If you use a third-party security provider or cloud platform, treat that as a supplier relationship involving personal information. You’ll want to know where the footage is stored, who can access it, and what happens if there’s a breach.

How To Store, Use, And Disclose Footage Without Creating Bigger Problems

Installing cameras is only half the job. Most compliance issues arise later, when something happens and someone wants the footage.

How long should you keep CCTV footage?

There’s no single retention period that suits every business, but the principle is: don’t keep it longer than you need.

Many businesses choose a retention period like 14–30 days unless footage is required for a specific incident or investigation. If footage is needed for an ongoing issue, you can retain that specific extract longer (with secure storage and limited access).

Can employees request CCTV footage?

Often, yes. If the footage contains personal information about them, they may request access under privacy principles.

This can get complicated if:

• the footage also identifies other individuals (staff or customers),
• releasing it could create safety risks, or
• it relates to an active investigation.

Because the correct response can depend on context, it’s worth getting advice before refusing a request or releasing footage that includes multiple people.

Can you share footage with the police?

If there’s an alleged crime (theft, assault, property damage), you may decide to share relevant footage with police.

As a good practice, keep a record of:

• what was shared,
• who requested it (and their details),
• when it was provided, and
• the reason for sharing.

Using footage for disciplinary action (handle with care)

If you plan to rely on footage in an employment process, it’s important to keep the process fair. That usually means:

• raising concerns with the employee,
• giving them a reasonable chance to respond,
• not relying on selective clips without context, and
• keeping the footage secure and limiting who views it.

Where businesses get into trouble is when footage is used informally (shared in group chats, shown to unrelated staff, or used to “name and shame”). Even if your cameras were installed for legitimate reasons, misuse of footage can create privacy and employment risks.

What if your CCTV system is hacked or leaked?

If workplace footage is accessed or disclosed improperly (for example, credentials are compromised or a device is stolen), that can be a privacy incident.

Having a plan in place makes a big difference, especially if you need to act fast. For many businesses, a Data Breach Response Plan is a practical way to document who does what, how to contain the issue, and how to assess whether notifications are required.

Key Takeaways

• New Zealand workplace camera compliance doesn’t sit in one single statute - your obligations commonly involve the Privacy Act 2020, employment good faith obligations, and fair workplace processes.
• Start with a clear purpose (security, safety, incident investigation) and make sure your camera placement is proportionate to that purpose.
• Avoid camera locations where people have a high expectation of privacy (like toilets and changing areas), treat audio recording as higher risk, and be especially careful about any covert recording.
• Introduce cameras with clear communication, appropriate staff engagement for your context, signage, and written rules (so staff aren’t surprised later).
• Control access, storage, and retention tightly - most disputes arise from how footage is used, not just the fact it exists.
• If you want to use footage in a disciplinary process or respond to access requests, make sure you handle it carefully and fairly, because the details matter.

If you’d like help setting up workplace camera policies, privacy documentation, or reviewing your employment processes, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.