Earlier this month, the New Zealand Privacy Commissioner
introduced the Biometric Processing Privacy Code
(Code). The Code is set to come into force on 3
November 2025, although businesses already undertaking biometric
processing activities have until 3 August 2026 to comply.
The Code establishes 13 stringent rules for the collection, use
and management of biometric data, including facial recognition,
fingerprints and voiceprints. These rules generally correspond with
the Information Privacy Principles under the Privacy Act 2020,
although new concepts have also been introduced.
In essence, the Code is designed to balance the benefits of
biometric technologies with strong protections for individual
privacy, ensuring that personal biometric data is handled
responsibly and ethically. Businesses of all sizes and across all
industries, whether using biometrics for security, customer
engagement or operational efficiency, will need to understand and
prepare for these
