Biometric Consent Form Template for New Zealand

A Biometric Consent Form is a critical legal document that organizations in New Zealand must use when collecting any form of biometric data from individuals. This form ensures compliance with privacy laws while establishing clear consent for the collection, processing, and storage of unique biological identifiers such as fingerprints, facial scans, voice patterns, or retinal data.

When do you need this document?

You need a Biometric Consent Form whenever your organization plans to collect biometric data for any purpose. This includes workplace access control systems using fingerprint scanners, facial recognition for security purposes, voice authentication for customer service, or time and attendance tracking using biometric identifiers. Educational institutions implementing biometric systems for student identification, healthcare providers using biometric patient identification, and retail businesses deploying facial recognition technology all require proper consent forms. The form is also essential when engaging third-party processors to handle biometric data or when implementing new biometric technologies in existing systems.

Key legal considerations

Your consent form must clearly specify the types of biometric data being collected and the exact purposes for collection and use. You must outline data retention periods, security measures, and deletion procedures to protect sensitive information. The document should address data sharing arrangements with third parties and specify whether the data will be stored locally or in the cloud. You need to include clear statements about individuals' rights to withdraw consent, access their data, and request corrections or deletions. The form must explain any automated decision-making processes using the biometric data and provide contact information for privacy inquiries. Consider including provisions for data breaches, international transfers if applicable, and the consequences of refusing to provide biometric data.

Legal requirements in New Zealand

Under the Privacy Act 2020, biometric data is considered sensitive personal information requiring explicit consent and additional protections. Your consent form must comply with the 13 privacy principles, particularly regarding collection, use, disclosure, and security of personal information. The Human Rights Act 1993 requires that biometric data collection does not result in unlawful discrimination. You must ensure the consent is freely given, specific, informed, and ongoing, with clear options for individuals to withdraw consent at any time. The form must include a privacy statement explaining how the organization handles personal information and individuals' rights under the Privacy Act. If collecting biometric data from employees, you must also consider the Employment Relations Act 2000 requirements for fair and reasonable treatment. Organizations must conduct privacy impact assessments for high-risk biometric processing activities and may need to notify the Privacy Commissioner depending on the scope and sensitivity of the data collection.