Resources and learning

A woman stands and puts her finger into a fingerprint scanner to gain access to another space. She has a brown bobbed hairstyle with a fringe and wears a blue business shirt and blue jeans. She is carrying a notepad. Read the Biometric Processing Privacy Code.

This guidance on the Biometric Processing Privacy Code (the Code) is to help organisations and individuals understand the Code and how it applies to them. It explains how the Office of the Privacy Commissioner (OPC, we) expect organisations to comply with the obligations in the Code. OPC will use the guidance as a benchmark if we are investigating any complaints or compliance issues under the Code.

The Code contains the legally enforceable rules that organisations must comply with and takes precedence over the guidance.

Read about the development of this Code.

Download the full PDF version of this guidance (PDF, 1.5MB).

Guidance in this section

Who and what does the Code apply to?
Who and what does the Code not apply to?
General good practice guidance on biometric processing
Complaints under the Code
Overview of Code rules
Rule 1: Purpose of collection
Rule 2: Source of biometric information
Rule 3: Tell people about the information you collect
Rule 4: Be fair in how you collect biometric information
Rule 5: Security of biometric information
Rule 6: Access to biometric information
Rule 7: Correction of biometric information
Rule 8: Accuracy of biometric information
Rule 9: Retention of biometric information
Rule 10: Limits on use of biometric information
Rule 11: Disclosure of biometric information
Rule 12: Transferring biometric information overseas
Rule 13: Unique identifiers
Running a trial under the Code
Applying the Code to example use cases