Jania Baigent

• The Biometric Processing Privacy Code 2025 (Code) was issued by the Privacy Commissioner on 6 August 2025, requiring compliance with specific privacy rules when collecting, using and managing biometric information for biometric processing. • The Code will come into force on 3 November 2025, but agencies already undertaking biometric processing activities will have until 3 August 2026 to comply with the new rules.

As privacy concerns continue to make headlines, recent inquiries into the handling of personal data within New Zealand's public sector serve as reminders to all organisations, regardless of sector, of the critical importance of safeguarding the personal information that has been entrusted to them. This article explores the findings from the recent privacy inquiries and provides guidance on how all businesses can strengthen their data protection measures to ensure compliance.

An update on New Zealand’s Customer and Product Data Bill The Customer and Product Data Bill (Bill) had its second reading last month. The Bill aims to set up a framework to enable greater access to, and sharing of, customer and product data for both customers and businesses.