Is It Legal To Have Workplace Cameras And Surveillance? (2026 Updated)

It’s completely normal to want more visibility over what’s happening in your workplace. Maybe you’ve had stock go missing, you’re worried about health and safety incidents, or you run a customer-facing business where aggressive behaviour is a real risk.

At the same time, cameras and other workplace surveillance can feel personal for staff. If you get the setup wrong, it can quickly turn into an employee relations issue (or a privacy complaint) rather than a solution.

This guide is updated for current New Zealand expectations and privacy practice. We’ll walk through when workplace cameras and surveillance can be legal, what rules you need to follow, and how to set it up in a way that protects your business and respects your people.

Is It Legal To Have Cameras In The Workplace In New Zealand?

In many cases, yes - it can be legal to use workplace cameras and surveillance in New Zealand.

But it’s not a “do whatever you like” situation. Even if you own the premises and the equipment, employees still have privacy rights at work. Your ability to monitor people is usually limited to what’s reasonable, necessary, and proportionate to your business needs.

In practice, workplace cameras are most likely to be lawful where:

• there’s a clear purpose (for example, theft prevention, workplace safety, or protecting staff from violence);
• people are told (or it’s clearly obvious) that cameras are operating;
• the cameras are placed in appropriate locations (not in private areas like toilets or changing rooms); and
• recordings are handled securely and only accessed when there’s a real need.

Workplace surveillance isn’t limited to CCTV, either. It can also include:

• audio recording (including call recording in some businesses);
• GPS tracking (for vehicles, deliveries, field teams);
• computer and device monitoring (emails, internet usage, logins); and
• access control records (swipe cards, entry logs).

What matters is not just what you monitor, but how you justify it, communicate it, and manage the information you collect.

What Laws Apply To Workplace Cameras And Surveillance?

There isn’t one single “workplace surveillance Act” in New Zealand that covers everything. Instead, your obligations usually come from a combination of privacy law, employment law principles, and health and safety duties.

Privacy Act 2020 (And The Privacy Principles)

Workplace surveillance usually involves collecting personal information about employees (and often customers, contractors, and visitors too). That means the Privacy Act 2020 is front and centre.

At a practical level, this generally means you should be able to show:

• You have a lawful, necessary purpose for collecting the footage or other monitoring data.
• You collect in a fair and transparent way (no sneaky monitoring unless there’s a very strong justification).
• You don’t collect more than you need (for example, filming a whole lunchroom because you suspect theft at the till is likely to be excessive).
• You keep it secure and restrict access.
• You don’t keep it longer than necessary (reasonable retention periods matter).
• You only use it for the reason you collected it (or a closely connected reason you’ve clearly communicated).

This is where having a clear Privacy Policy (and, in the employment context, a tailored privacy notice or staff policy) can make a big difference. It sets expectations early and shows you’ve thought about compliance from day one.

Employment Law (Good Faith And Fair Process)

Even if surveillance is technically “allowed” under privacy rules, it can still create legal risk if you use it unfairly in an employment process.

In New Zealand employment relationships, employers and employees have good faith obligations. That often means:

• being open about important workplace policies (including monitoring);
• not misleading staff about whether they’re being recorded;
• using surveillance material carefully and fairly if it becomes relevant to misconduct or performance; and
• ensuring your disciplinary process is procedurally fair if you’re relying on footage as evidence.

If you’re planning to use surveillance to support disciplinary action, it’s also wise to make sure your expectations are properly set out in your Employment Contract and workplace policies.

Health And Safety At Work Act 2015

Sometimes cameras are installed primarily for safety - for example, monitoring a high-risk area, managing aggressive customer behaviour, or investigating near-miss incidents.

Health and safety obligations can help justify surveillance where it’s genuinely aimed at preventing harm. But it doesn’t override privacy and fairness requirements. You still need to take a balanced approach, and avoid “safety” becoming a catch-all reason for excessive monitoring.

When Is Workplace Surveillance Likely To Be Unlawful (Or High Risk)?

Workplace surveillance tends to become legally risky when it feels excessive, secretive, or disconnected from a legitimate business need.

Some common high-risk scenarios include:

Hidden Cameras (Covert Surveillance)

Covert surveillance can be lawful in very limited circumstances, but it’s a high bar. If you record staff secretly without a strong justification, you’re more likely to face:

• a privacy complaint,
• an employment relations challenge, or
• evidence being treated as unfairly obtained (which can complicate disciplinary action).

If you suspect theft or serious misconduct and you’re considering covert surveillance, it’s worth getting tailored advice first. Small details - like duration, location, who authorises it, and how it’s documented - can make a major difference.

Cameras In Private Areas

Putting cameras in areas where people have a strong expectation of privacy is usually a line you shouldn’t cross.

This typically includes:

• toilets and bathrooms;
• changing rooms;
• showers;
• areas used for personal care or medical needs.

Even in staff-only areas like break rooms, you should think carefully. If your purpose is security, can you achieve it with less intrusive placement (for example, monitoring the stockroom door rather than filming where staff eat and relax)?

Audio Recording Without Clear Justification

Audio recording tends to be more sensitive than video because it captures the content of conversations, which is often more intrusive than simply capturing movement in a space.

If you’re considering recording calls or conversations, you’ll want to be very clear on:

• why you need to record;
• who will be recorded (staff, customers, both);
• how consent/notice will work; and
• how you’ll store and manage recordings.

For phone calls, it’s common to use an automated message (for example, “calls may be recorded for training and quality”). For a deeper dive on this area, the rules in practice are closely tied to privacy and transparency expectations in Call Recording.

Using Surveillance As “Performance Tracking” Without Boundaries

It’s one thing to have cameras covering entrances, tills, or hazardous zones. It’s another to use surveillance to micromanage workers (for example, monitoring how often someone sits down, whether they’re chatting, or taking breaks).

If your real concern is performance management, it’s usually better to address that through clear expectations, training, and a fair performance process - rather than trying to “catch” employees on camera.

How Do You Set Up Workplace Cameras The Right Way?

If you want to use cameras (or any surveillance) and keep the legal risk low, the key is to treat it as a proper compliance project - not just a hardware install.

Here’s a practical approach many businesses follow.

1. Be Clear On Your Purpose (And Document It)

Start with the “why”. Good reasons might include:

• preventing and investigating theft or property damage;
• protecting staff and customers from violence or abuse;
• monitoring access to restricted areas (cash handling, stockrooms);
• supporting health and safety incident investigation.

If you can’t clearly explain why the camera is necessary, it’s a sign you might be collecting more personal information than you need.

2. Choose Camera Locations That Match The Purpose

Try to position cameras so they capture what matters, without capturing more than necessary.

For example:

• If the risk is theft at point-of-sale, focus on the till area (not the whole staff workspace).
• If the issue is after-hours break-ins, consider external cameras and entry points.
• If the concern is a hazardous area, focus on the hazard zone and signage.

Also think about “incidental capture”. A camera aimed at a doorway might also record a staff desk, a computer screen, or a private conversation area.

3. Tell People Clearly (Notice And Signage)

Transparency is one of the biggest practical drivers of compliance. If people don’t know they’re being recorded, you’re much more likely to face a dispute later.

Common steps include:

• signage at entrances and near monitored areas;
• updating onboarding materials;
• writing a workplace surveillance policy; and
• including monitoring terms in employment agreements or policies.

This also helps manage expectations: cameras are there for safety and security, not to “spy” on staff.

4. Limit Access To Footage (And Keep A Simple Access Log)

Workplace footage should not be treated like general office viewing. As a rule of thumb:

• only specific roles should have access (for example, owner, operations manager, HR lead);
• access should be for a reason (incident review, police request, internal investigation);
• you should avoid sharing footage casually (including in staff group chats).

Even a basic access log (who accessed footage, when, and why) can help show you’re handling personal information responsibly.

5. Set A Retention Period (And Stick To It)

Keeping footage “just in case” forever is rarely a good idea. If something goes wrong, long retention can increase your risk (more data to protect, more potential misuse).

A practical retention policy might be:

• a short standard retention period for routine footage; and
• longer retention only where an incident is identified and the footage is needed for an investigation.

Retention periods should be based on your business needs. For example, if issues are usually discovered within a week, keeping routine footage for months may be hard to justify.

6. Think About Data Security And Third-Party Providers

Many CCTV systems now store footage in the cloud or are accessed via mobile apps. That can be convenient, but it also raises questions like:

• Where is the footage stored (NZ or offshore)?
• Who can access it (including the provider)?
• What security settings are enabled (multi-factor authentication, strong passwords)?
• What happens if there’s a breach?

If you’re using a provider who hosts or processes personal information for you, it’s worth considering whether you need a proper data-handling arrangement in place. This is especially important if surveillance forms part of your broader compliance posture (for example, if you already maintain an Information Security Policy).

Can You Use Camera Footage For Disciplinary Action Or Dismissal?

Sometimes the reason you install cameras is to deter issues, but the real test is what happens when you actually need to rely on the footage.

In many cases, you can use camera footage in a disciplinary process - but the way you obtained it and the way you use it matters.

Footage Should Match The Purpose You Told People About

If you told staff cameras are for “security”, then use the footage later to critique minor performance issues, that mismatch can cause problems.

Ideally, your policy and employment documents should cover:

• where cameras operate;
• what the cameras are for;
• when footage may be reviewed (for example, incident, complaint, suspected misconduct); and
• how footage may be used in investigations or employment processes.

You Still Need A Fair Process

Footage is just one piece of evidence. If you’re considering disciplinary action, you generally need to ensure the employee has a fair chance to respond to the allegations.

Common good-practice steps include:

• telling the employee what the concern is and what evidence you’re relying on;
• allowing reasonable time to respond and seek support;
• keeping an open mind before making a decision; and
• documenting the process carefully.

If you’re not sure whether your process is fair (or whether the footage can be relied on), it’s a good time to get advice early - before the situation escalates.

Be Careful With “Gotcha” Investigations

It can be tempting to use surveillance as a way to “catch someone out”. But if the overall approach is heavy-handed or unfair, it can backfire.

A more defensible approach is to use footage as part of a wider, reasonable investigation process, with clear documentation and limited access.

What Documents And Policies Should You Have In Place?

This is where many businesses get caught out. Installing cameras is straightforward. Making sure your legal foundations support what you’re doing is the part that protects you long-term.

Depending on your workplace, you might consider having:

• A privacy policy and privacy collection notices that reflect the reality of what you collect and why (including CCTV footage). A tailored Privacy Collection Notice can be particularly helpful if you record customers and visitors in a store or reception area.
• A workplace surveillance / CCTV policy explaining locations, purposes, access, retention, and how employees can raise concerns.
• Employment agreements and workplace policies that align with how monitoring actually happens in your business. It’s common to embed relevant terms in an Employment Contract and then expand on the practical detail in the handbook/policy.
• A plan for dealing with privacy incidents, especially if footage is cloud-stored or accessible remotely. If something goes wrong, a Data Breach Response Plan can help you respond quickly and consistently.

If your business already has cameras but no written policy, you don’t need to panic - but it’s worth fixing sooner rather than later. When there’s a complaint or employment dispute, it’s much harder to retrofit a process under pressure.

And as tempting as it is to download a generic policy template, surveillance policies usually need to reflect your specific workplace layout, who has access, and why you’re recording in the first place.

Key Takeaways

• Workplace cameras and surveillance can be legal in New Zealand, but they need to be reasonable, necessary, and handled fairly.
• The Privacy Act 2020 is usually the key law, because CCTV footage and monitoring data is often personal information about employees and visitors.
• Covert surveillance is high risk and should only be considered in limited circumstances with clear justification and careful handling.
• Avoid monitoring private areas (like bathrooms and changing rooms) and be cautious about audio recording, which is usually more intrusive than video.
• To set cameras up properly, you should document your purpose, choose sensible locations, use clear signage, restrict access to footage, and set a reasonable retention period.
• If you plan to use footage in disciplinary action, you’ll still need a fair employment process and your use of footage should match the purpose you communicated to staff.
• Strong legal foundations help: having the right privacy documentation, workplace policies, and employment terms in place can prevent disputes and protect your business as it grows.

If you’d like help setting up workplace surveillance the right way (or updating your employment documents and privacy compliance), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.