CCTV privacy policies written around how your cameras and footage are actually used

The issue is usually not just having cameras installed. The bigger risk is collecting footage without clear internal rules and public-facing explanations about why recording happens, who can view footage, how long it is kept and how requests or complaints are handled. That can create privacy concerns for staff, customers and visitors. A policy helps document your approach, but the legal position depends on the way the business handles information in practice, not just what the written policy says.

It commonly explains where CCTV operates, the purpose of recording, the kinds of footage collected, who may access recordings, when footage may be disclosed, retention periods, storage and security expectations, and how individuals can ask for access or raise concerns. It may also address signage, internal authorisation and limits on secondary use of footage. If your business uses surveillance across multiple locations or for different purposes, those operational differences can affect how the policy should be written.

We usually need a practical summary of your CCTV setup rather than technical legal language. That includes where cameras are located, why they are used, whether audio is captured, who can review footage, how long recordings are retained, what systems or providers are involved and how staff and visitors are notified. The wording should reflect the information your business collects, the reasons it is used and the parties it is shared with, so accurate operational detail is important from the outset.

A generic template can be risky if it describes practices your business does not follow, or fails to mention practices you do follow. For example, it may say footage is only used for security when managers also use it for incident review, staff monitoring or customer complaints. It may also miss access controls, retention settings or location-specific notice issues. The work is designed to identify practical risk areas and recommend next steps, while the final legal position depends on your facts and implementation, especially if actual practices later drift from the policy wording.

Timing depends on the complexity of your surveillance setup and how quickly the relevant details are provided. A single-site setup with straightforward recording practices is usually faster than a multi-site operation with different camera purposes, multiple decision-makers or third-party system providers. Once we have the practical information, we prepare the policy draft and work through the included amendments. If further privacy issues emerge during drafting, we can explain whether they fit within scope or need separate advice.

Submit an enquiry on this page or click 'Get started'. One of our legal consultants will review it within 1 business day and get in touch to understand what you need.

Your consultant will then email you a fixed-fee quote setting out the cost, scope and timing. If you're happy with it, you can accept the quote and sign our engagement letter online.

Once you've accepted, one of our Australian-qualified lawyers will work with you to complete your project. They'll contact you by email or phone if they need anything.

Sprintlaw works on fixed-fee pricing wherever possible, so you can review the scope and cost before you decide whether to proceed. For the CCTV Privacy Policy service, pricing starts from $900.00.

After you enquire, a legal consultant will confirm what is included, the expected timing and whether any extra work is needed before you engage us.

We work online, so we can help wherever you are in New Zealand. Our team works remotely, mainly from Australia.

Your work is done by our Australian-qualified lawyers, who hold Australian practising certificates and specialise in business law. None of them are New Zealand lawyers or hold a New Zealand practising certificate.

Sprintlaw NZ Limited is a legal consultancy, not a law firm, and is not regulated by the New Zealand Law Society. We don't act in court or tribunal matters, conveyancing (including leases and business sales) or other reserved areas of work. Communications with Sprintlaw are unlikely to be protected by legal professional privilege. We still keep everything confidential under our engagement letter.