New Zealand: Biometric Processing Privacy Code 2025 enters into force
Description
Biometric Processing Privacy Code 2025 enters into force
On 3 November 2025, the Privacy Commissioner Biometric Processing Privacy Code 2025, issued under the Privacy Act 2020, enters into force. The Code strengthens existing notification, purpose, and transparency obligations and introduces a requirement for agencies to conduct a proportionality assessment weighing the privacy risks and public benefits of biometric processing, as well as to implement appropriate privacy safeguards. It applies to all biometric identification, verification, and categorisation activities except those carried out by health agencies handling health information, and restricts biometric categorisation for purposes such as emotion or personality analysis. The Code also establishes conditions for overseas disclosure of biometric information to ensure comparable data-protection safeguards. Existing biometric systems have to comply from 3 August 2026.
Original source