Buddy Punching: How It Costs Businesses Money (and How Biometrics Stop It)
Overview: buddy punching quietly costs businesses thousands each year. Learn what it is, how it happens, and how biometric time & ...
Clear, factual guidance on biometric privacy in NZ. Learn how data is stored, encrypted, and hosted—plus myths debunked and legal insights shared.
At NZTeco, we believe transparency builds trust. In an age where facial recognition, fingerprint scanners, and biometric attendance are becoming more common, many New Zealanders are asking: "Where does my data go? Who sees it? Is it safe?" — This article aims to clear that up.
Biometric templates are NOT raw images — They are encrypted, non-reversible mathematical representations of facial features, fingerprints, or palm veins.
Biometric data is encrypted at all stages — Both on the devices and wherever it is hosted.
Hosting can be local or external — The software can be installed by the client themselves or hosted by a trusted third-party provider.
The Privacy Act 2020 applies — But you may not be directly responsible depending on how the data is collected or processed.
This is based on Section 11 of the Privacy Act, which outlines responsibilities when an agency uses another party to process information on its behalf.
In the case of NZTeco systems, we do not collect or retain personal information such as employee addresses, telephone numbers, or other personal records. These details, if required, are managed and stored by the end-user organisation within their own systems or internal processes.
Biometric attendance and access control devices supplied by NZTeco operate as tools for the customer’s own workforce management or security systems. Personal information storage is not required for the devices to function, and any data that is configured within the system is fully controlled by the end-user organisation.
For further clarity on how the Privacy Act applies when third-party providers are involved, refer to the Office of the Privacy Commissioner’s guidance on third-party providers (PDF).
When using a ZKTeco device:
The raw biometric (like your face) is processed and instantly converted to a mathematical template.
That image is then deleted and only the template remains.
Templates are encrypted using advanced algorithms, and cannot be reverse engineered.
Where it is stored:
On-device: Stored locally within the device for quick identification.
On server: Optionally stored on software installed on-premises by the client or hosted by a third-party provider (e.g., on a secure cloud platform like AWS).
In both cases, security measures include:
Password-protected access
Role-based permissions
Firewalls & intrusion detection
Regular firmware updates
MYTH: "The device takes and stores my photo forever."
MYTH: "Biometric data can be stolen or hacked easily."
MYTH: "All data is stored in China."
We only work with biometric systems that use encrypted templates.
Our systems are installed in a way that aligns with OPC and international data privacy guidelines.
Our core biometric devices are certified under our Cybersecurity Conformance Certificate.
We support clients who choose to host software on-premises or in the cloud.
We help partners implement clear consent and privacy disclosure processes.
The business collecting it is the "agency" under the law. If hosted externally, that third-party must act under written instructions. Biometric Privacy is therefore their responsibility.
Biometric systems offer security, convenience, and speed—but they must be implemented correctly. At NZTeco, we’re committed to privacy, education, and helping businesses stay compliant.
Still unsure? We’ll happily walk you through the process or help you assess your current setup.
From access control, time attendance and turnstiles to CCTV, smart locks, vehicle access, digital signage and automation, NZTeco helps match the right technology to the job.
Send us the details and we’ll help you work out the best next step.
We’re a Licensed Security Company!
NZTeco Limited is officially licensed under the Private Security Personnel Licensing Authority (PSPLA).
License Number: 24-121944
License Classes: Security Technician & Security Consultant
Expiry Date: 22-11-2029
What does this mean?
It confirms that we meet the legal standards to provide professional and secure services in New Zealand, ensuring your peace of mind and trust in our solutions.
Being licensed ensures compliance with industry regulations, ethical practices, and accountability in delivering Access Control, CCTV, and other security solutions.
For more about the PSPLA and why choosing a licensed provider matters, visit the official PSPLA information page: https://www.pspla.govt.nz/ (opens in a new tab).
