What you really need to know about biometric privacy compliance, data, and separating fact from fiction
At NZTeco, we believe transparency builds trust. In an age where facial recognition, fingerprint scanners, and biometric attendance are becoming more common, many New Zealanders are asking: "Where does my data go? Who sees it? Is it safe?" — This article aims to clear that up.
Quick Facts (Read This First):
-
Biometric templates are NOT raw images — They are encrypted, non-reversible mathematical representations of facial features, fingerprints, or palm veins.
-
Biometric data is encrypted at all stages — Both on the devices and wherever it is hosted.
-
Hosting can be local or external — The software can be installed by the client themselves or hosted by a trusted third-party provider.
-
The Privacy Act 2020 applies — But you may not be directly responsible depending on how the data is collected or processed.
What the Commissioner Says about Biometric privacy
This is based on Section 11 of the Privacy Act, which outlines your responsibilities when using another party to process data on your behalf. Read their guidance on third-party providers (PDF).
How Biometric Data Is Actually Stored
When using a ZKTeco device:
-
The raw biometric (like your face) is processed and instantly converted to a mathematical template.
-
That image is then deleted and only the template remains.
-
Templates are encrypted using advanced algorithms, and cannot be reverse engineered.
Where it is stored:
-
On-device: Stored locally within the device for quick identification.
-
On server: Optionally stored on software installed on-premises by the client or hosted by a third-party provider (e.g., on a secure cloud platform like AWS).
In both cases, security measures include:
-
Password-protected access
-
Role-based permissions
-
Firewalls & intrusion detection
-
Regular firmware updates
Debunking the Common Myths about biometric privacy
MYTH: "The device takes and stores my photo forever."
MYTH: "Biometric data can be stolen or hacked easily."
MYTH: "All data is stored in China."
NZTeco's Commitment to biometric Privacy & Security
-
We only work with biometric systems that use encrypted templates.
-
Our systems are installed in a way that aligns with OPC and international data privacy guidelines.
-
Our core biometric devices are certified under our Cybersecurity Conformance Certificate.
-
We support clients who choose to host software on-premises or in the cloud.
-
We help partners implement clear consent and privacy disclosure processes.
FAQs
The business collecting it is the "agency" under the law. If hosted externally, that third-party must act under written instructions. Biometric Privacy is therefore their responsibility.
Final Thoughts
Biometric systems offer security, convenience, and speed—but they must be implemented correctly. At NZTeco, we’re committed to privacy, education, and helping businesses stay compliant.
Still unsure? We’ll happily walk you through the process or help you assess your current setup.
