Main laws

New Zealand Act

Private Security Personnel and Private Investigators Act 2010

The Private Security Personnel and Private Investigators Act 2010 regulates defined private security and investigation services offered for...

In forceNew ZealandPlain-English guide10 practical checks

Plain-English explainers, not legal advice. Use the linked official source for section-level detail, and get advice for your situation.

Get legal help

Start here

Quick read

  • The Private Security Personnel and Private Investigators Act 2010 is the main New Zealand law for specified private security and investigation services offered for hire.
  • It is narrower than a general law for frontline staff.

Likely relevant if

  • Private investigation businesses that, for payment, seek, obtain or supply information about a person’s character, behaviour, finances, occupation, business, identity or whereabouts, unless an exclusion applies
  • Security technician businesses installing, servicing or maintaining security equipment where the work falls within the regulated class
  • Security consultant businesses advising on security arrangements, systems or risks within the regulated class

Check first

  • Hold the required licence before carrying on a regulated class of private security business
  • Ensure each person in a defined responsible employee role holds the required certificate of approval before doing regulated work
  • Produce a licence on demand to the people specified in section 65

What this Act does

The Private Security Personnel and Private Investigators Act 2010 regulates specified private security and investigation services offered for hire in New Zealand. Its purpose is to help ensure that people offering those services, and the personnel providing them, are suitably qualified and do not behave in ways contrary to the public interest.

For a business owner, the practical point is simple. This Act is not a general workplace law for all frontline staff. It applies to defined classes of business and defined responsible employee roles. If your work falls inside those classes, you need to treat licensing and approval as part of day-to-day operations, not just startup paperwork.

The Act also sets up the licensing authorities, complaints and discipline processes, appeal rights, public registers, information powers, badge rules, and some ongoing update obligations.

Practical sense check

  • Check whether your service fits one of the regulated business classes
  • Check whether any worker is a responsible employee in a regulated employee class
  • Confirm the right licence or certificate is in place before work starts
  • Review your update, renewal and complaints processes as ongoing compliance tasks
  • Check the regulations as well as the Act where records or conduct requirements may apply

Who is in scope

The Act defines private security business by reference to the classes in sections 5 to 11. These include private investigators, security technicians, security consultants, confidential document destruction agents, repossession agents, property guards, personal guards and crowd controllers.

It also defines matching responsible employee classes in sections 13 to 19. Those employee definitions matter because the certificate of approval regime is tied to those specific roles, not to employees generally.

One of the most important business questions is whether your service really falls inside a regulated class. That answer depends on the statutory definitions, not on what the business calls itself.

Key points

  • Usually in scope - businesses selling one of the defined private security or investigation services for hire
  • Usually in scope - businesses expanding into a new regulated service line such as crowd control, personal guarding or repossession
  • Usually in scope - responsible employees carrying out work in one of the defined employee classes
  • Usually out of scope - staff who are not in a defined regulated class, even if they are customer-facing or operational
  • Usually out of scope - activities that fall within a statutory exclusion

The private investigator definition is a good example of how narrow the Act can be. A person is a private investigator if, for valuable consideration, they carry on a business seeking, obtaining or supplying certain information about a person, such as character, behaviour, finances, occupation, business, identity or whereabouts. But information in a public record is excluded.

The Act also excludes some information-gathering from the private investigator definition, including some work for the Crown, Police or local authorities, some work done at the request of a person who is not a client of the business, some work that is only a necessary, usual or reasonable incident of another non-regulated activity, some news-related work, some cultural, historical, educational, literary or scientific work, some work relating only to the engager, and some work done in the course of banking, credit bureau or debt-collecting business.

The Act also says a person is carrying on a private investigator business if they hold themselves out to the public as ready to carry on that business. That means classification can turn on both the service itself and how the business presents that service to the market.

Trigger points businesses should watch

Compliance issues often appear when a business changes shape. You may start in one service area and later add another. You may move from technical security work into guarding, from debt recovery support into repossession, or from general information services into private investigation work. Each change can alter whether the Act applies and what approvals are needed.

The Act also treats some public offers of service as carrying on business. In the private investigator definition, a person is carrying on a business if they hold themselves out to the public as ready to carry on that business. That means websites, proposals and advertising can matter when you assess whether the regime applies.

Other trigger points sit inside the approval system itself. A business may need to think about amendments, renewals, annual returns, changes of place of business, officer consent issues, or a waiver if a disqualifying event happens while a licence or certificate is already in force.

Practical sense check

  • Before launching a new service, map it against sections 5 to 11
  • Before assigning staff to regulated work, check whether they are responsible employees who need certificates
  • Before changing your business structure or officers, check whether disqualification or consent rules may be relevant
  • Before renewal time, confirm your licence and certificate details are current
  • Before changing premises, check whether the Act requires a formal update or amendment

Licences for businesses and certificates for responsible employees

Part 2 uses a two-level model. First, people or companies carrying on regulated private security business must hold the required licence. Secondly, defined responsible employees must hold a certificate of approval. A business cannot assume that a valid business structure is enough if the people doing regulated work do not hold the required approval.

The Act includes application, inquiry, notice, objection, hearing, decision, issue, duration, amendment and renewal processes for both licences and certificates. It also provides for temporary certificates of approval and emergency appointments of responsible employees in some situations.

For companies, officer issues also matter. The Act restricts persons from acting as officers of a licensed company without the consent of the Licensing Authority. It also includes grounds of disqualification for individuals and companies, and a written waiver process if a disqualifying event happens while a licence or certificate is already in force.

In practice

  • Business-level check - do we need a licence for the class of business we carry on?
  • Worker-level check - does this role fit a defined responsible employee class?
  • Company governance check - are any officers affected by disqualification rules or consent requirements?
  • Change management check - do we need an amendment, renewal or waiver application?

The Act also deals with the effect and duration of licences and certificates, and with annual return updating of licence and certificate information. In practice, that means approval is not just about getting the first document issued. You need a system to keep approvals current and aligned with the work actually being done.

Operating rules once you are approved

Part 3 sets practical operating rules for licensees and certificate holders. A licensee must produce the licence on demand to a Licensing Authority, a constable, a person authorised by the chief investigator of the Complaints, Investigation, and Prosecution Unit, or a person the licensee is dealing with while carrying on or attempting to carry on the relevant private security business.

If the licensee is a company, it is enough if the licence is kept at the company’s registered office and made available for inspection on demand by those people.

A certificate holder has similar duties. They must produce the certificate of approval on demand to the same categories of requester, adjusted for the course of performing duties as a responsible employee. They must also, on demand, tell the requester the name and address of the person by whom they are employed or engaged as a responsible employee.

Practical sense check

  • Keep the business licence accessible and easy to produce
  • If the licensee is a company, make sure the licence is available at the registered office
  • Train certificate holders on when they must produce their certificate
  • Train certificate holders on the duty to provide employer or engager name and address on demand

The Act also requires identification badges in certain cases. An individual who holds a licence for any of the classes of business described in sections 6 to 11 must wear an identification badge while carrying on or attempting to carry on that business. A certificate holder in the employee classes described in sections 14 to 19 must also wear a badge while performing their duties.

The badge must be worn in a position that is readily visible. There is a safety exception if the person reasonably believes wearing the badge would threaten their safety or the safety of any person.

The badge must contain a unique identifier number or code, a photograph, the class or classes of work the person is authorised to carry out, and the expiry date of the licence or certificate. It must not include the person’s name or address. A temporary certificate badge must identify the wearer as holding a temporary certificate.

Records, information and office notices

The Act does not itself set out a full list of records every business must keep. Instead, section 69 makes it an offence to fail, without reasonable excuse, to comply with record-keeping requirements prescribed by regulations made under section 114. That means businesses need to check both the Act and any regulations made under it.

Section 69 applies to a licensee or certificate holder, and also to a person who employs or engages any repossession employee or crowd controller employee. That is an important scope point for businesses using those worker categories.

Section 70 gives Police and authorised investigators access rights to records or documents that regulations require to be kept. When lawfully required, the person must show the record or document without delay and must make and provide a copy, or if that is impracticable, provide the record or document or the specified part of it.

Documents to keep in order

  • Identify which regulations apply to your class of business or employee role
  • Create a record-retention process that matches those regulations
  • Make sure required records can be found and produced without delay
  • Set a clear internal process for copying and providing requested records
  • Check whether your business employs or engages repossession employees or crowd controller employees, because sections 69 and 70 expressly refer to those arrangements

The Act also includes updating certificate information and a requirement for private investigators to display notices at offices. It includes annual return obligations updating licence and certificate information, and a process dealing with change of place of business. These are practical administration tasks that should sit on your compliance calendar.

The Act also gives Police and the Complaints, Investigation, and Prosecution Unit power to require information, and it creates an offence for providing false information. Businesses should treat formal requests and application information carefully and keep internal responsibility for those responses clear.

Complaints, discipline and cancellation risk

Part 4 creates a formal complaints and discipline regime. Complaints can be made against licensees and certificate holders. The Licensing Authority may refer a matter to Police or to the Complaints, Investigation, and Prosecution Unit. The Authority may also suspend a licence or certificate of approval pending determination of a complaint.

The Act distinguishes between misconduct and unsatisfactory conduct. Misconduct includes conduct a reasonable person would consider disgraceful, wilful or reckless, or conduct that contravenes the Act or regulations.

Unsatisfactory conduct includes conduct falling short of the standard a reasonable member of the public is entitled to expect from a reasonably competent licensee or certificate holder, incompetent or negligent conduct, or conduct that would reasonably be regarded by private security personnel or private investigators of good standing as unacceptable.

The Act includes mandatory and discretionary grounds for cancellation. For certificate holders, the discretionary grounds reproduced in the text include breach of a condition, a determination that the person is no longer suitable because of character, circumstances or background, certain convictions, repeated offending under the Act, misconduct or gross negligence, some overseas offending or orders, bankruptcy-related events, and false statements in the application.

Schedule 1 also lists some offences that can operate as discretionary grounds for cancellation of a licence or certificate, including sections 85, 109 or 110 of the Act, section 29 or 30 of the Summary Offences Act 1981, and sections 3, 4 or 9 of the Trespass Act 1980.

If a licence or certificate is cancelled or suspended, it must be returned to the Licensing Authority within 5 working days after notification, unless there is a reasonable excuse.

Risk controls

  • Have a written incident and complaints process
  • Investigate conduct issues quickly and keep clear records
  • Review whether any conviction, bankruptcy event or false statement issue could affect suitability
  • Plan for continuity if a key licence or certificate is suspended
  • If a licence or certificate is suspended or cancelled, diarise the 5 working day return requirement immediately

Registers, appeals and practical checks before acting

The Licensing Authorities must maintain registers of licensees and certificate holders. The Act also provides for inspection of registers and statements as to register contents. Residential address information recorded in the register is not available for public inspection.

The Act gives appeal rights to the District Court and, on questions of law only, to the High Court. For District Court appeals, the text shows a 20 working day appeal period after written notification of the decision, unless the court allows more time. The decision generally remains in force pending appeal unless the court orders otherwise.

For businesses, that means an adverse decision can affect trading straight away. You should not assume that filing an appeal automatically pauses the effect of the decision.

Sense check

  • Check whether your service still fits the class of business you are relying on
  • Check whether each regulated responsible employee holds the right certificate
  • Check whether any badge-wearing rule applies to the role
  • Check the regulations for any record-keeping duties that apply to your business
  • Check whether any annual return, amendment, renewal or place-of-business update is due
  • If you receive an adverse decision, note the appeal deadline immediately

Common questions

Does this Act apply to all businesses with customer-facing or security-related staff?

No. The Act is narrower than that. It applies to defined classes of private security business and defined responsible employee roles. A business should first check whether its service actually fits one of the regulated classes in sections 5 to 11.

What is the difference between a licence and a certificate of approval?

A licence is the business-level permission required for people or companies carrying on regulated private security business. A certificate of approval is the worker-level approval required for defined responsible employee roles. A business may need both.

Can a business be caught by the Act before it starts doing paid work?

Yes, in some cases. For private investigator work, the Act says a person is carrying on a business if they hold themselves out to the public as ready to carry on that business. That means public offers of service can matter, not just completed jobs.

Do all licence holders have to wear an identification badge?

No. The badge rule for licence holders applies to individuals who hold a licence for the classes of business described in sections 6 to 11. Certificate holders in the employee classes described in sections 14 to 19 must also wear a badge while performing their duties, unless they reasonably believe wearing it would threaten safety.

Does the Act itself tell me exactly what records I must keep?

Not in section 69. That section makes it an offence to fail, without reasonable excuse, to comply with record-keeping requirements prescribed by regulations made under the Act. You need to check the regulations as well as the Act.

Does holding a licence or certificate give extra legal powers?

No. The Act expressly says a licence or certificate does not confer additional powers on the holder.

Related topics

How Sprintlaw can help