The Act defines private security business by reference to the classes in sections 5 to 11. These include private investigators, security technicians, security consultants, confidential document destruction agents, repossession agents, property guards, personal guards and crowd controllers.
It also defines matching responsible employee classes in sections 13 to 19. Those employee definitions matter because the certificate of approval regime is tied to those specific roles, not to employees generally.
One of the most important business questions is whether your service really falls inside a regulated class. That answer depends on the statutory definitions, not on what the business calls itself.
The private investigator definition is a good example of how narrow the Act can be. A person is a private investigator if, for valuable consideration, they carry on a business seeking, obtaining or supplying certain information about a person, such as character, behaviour, finances, occupation, business, identity or whereabouts. But information in a public record is excluded.
The Act also excludes some information-gathering from the private investigator definition, including some work for the Crown, Police or local authorities, some work done at the request of a person who is not a client of the business, some work that is only a necessary, usual or reasonable incident of another non-regulated activity, some news-related work, some cultural, historical, educational, literary or scientific work, some work relating only to the engager, and some work done in the course of banking, credit bureau or debt-collecting business.
The Act also says a person is carrying on a private investigator business if they hold themselves out to the public as ready to carry on that business. That means classification can turn on both the service itself and how the business presents that service to the market.