Source: Privacy Commissioner
Read the Biometric Processing Privacy Code.
This guidance on the Biometric Processing Privacy Code (the Code) is to help organisations and individuals understand the Code and how it applies to them. It explains how the Office of the Privacy Commissioner (OPC, we) expect organisations to comply with the obligations in the Code. OPC will use the guidance as a benchmark if we are investigating any complaints or compliance issues under the Code.
The Code contains the legally enforceable rules that organisations must comply with and takes precedence over the guidance.
Read about the development of this Code.
Who does the Code apply to?
The Code applies to all organisations – businesses, government agencies, NGOs – that collect biometric information for biometric processing (with limited exceptions). “Agency” is the term used in the Privacy Act, but we’ve used the term “organisation” in this guidance. Agency is defined in section 4 of the Privacy Act.