NZ Police Fail to Delete Unlawful Photos by Extended Deadline

Published Date : 8/7/2025 

Despite an extended deadline, New Zealand's police force has failed to delete tens of thousands of unlawfully collected photographs, raising concerns about privacy and compliance. 

Four years after New Zealand police were ordered to delete tens of thousands of unlawfully collected photographs, the law enforcement agency has once again missed its extended deadline.

In 2021, the Independent Police Conduct Authority (IPCA) and the Office of Privacy Commissioner (OPC) launched an investigation into the police practice of taking photos of young people, including Maori. The law enforcement agency was also found to be engaged in a “systemic” practice of collecting duplicate sets of fingerprints and photographs of young people in custody and holding on to them longer than allowed.

The force was found to be in breach of privacy regulations and was ordered to delete all unlawfully collected material in their systems. The deadline for the deletion of unlawfully taken photographs was extended to the end of June. In March, however, the police informed the Privacy Commissioner that they would miss the deadline because there is no “viable manual or technology solution” to complete the task.

The law enforcement agency was also supposed to prevent access to non-compliant photographs or records. Its letter, however, states that there is currently no solution to control or restrict access to the material. The police have previously said that their efforts to delete the images have been delayed because the photographs are spread out throughout different systems and work phones. Many of the images are unlabeled and lack metadata.

Privacy Commissioner Michael Webster said that his office is currently considering next steps, according to Radio New Zealand. “Not meeting the final requirements means the police have not complied fully with the notice,” he says.

The force is currently working on the M365 Workspace Initiative, a collection of Microsoft applications, such as SharePoint, OneDrive, Teams, and the Managed Content Store (MCS), designed to ease information sharing. This week, the country introduced a new Biometric Processing Privacy Code, which comes into force on November 3rd. According to the rulebook, special attention must be given in circumstances in which biometric information is being collected from children. 

Frequently Asked Questions (FAQS): 

Q: What investigation led to the order for the police to delete unlawfully collected photos?

A: The Independent Police Conduct Authority (IPCA) and the Office of Privacy Commissioner (OPC) launched an investigation in 2021 into the police practice of taking photos of young people, including Maori, and found that the police were engaged in a systemic practice of collecting duplicate sets of fingerprints and photographs.

Q: Why did the police miss the extended deadline for deleting the photos?

A: The police informed the Privacy Commissioner that they would miss the deadline because there is no viable manual or technology solution to complete the task. The photographs are spread out throughout different systems and work phones, and many of the images are unlabeled and lack metadata.

Q: What are the consequences of not meeting the final requirements?

A: Not meeting the final requirements means the police have not complied fully with the notice. The Privacy Commissioner's office is currently considering the next steps.

Q: What is the M365 Workspace Initiative?

A: The M365 Workspace Initiative is a collection of Microsoft applications, such as SharePoint, OneDrive, Teams, and the Managed Content Store (MCS), designed to ease information sharing within the New Zealand police force.

Q: What is the new Biometric Processing Privacy Code, and when does it come into effect?

A: The new Biometric Processing Privacy Code, which comes into force on November 3rd, requires special attention to be given when biometric information is being collected from children. 

More Related Topics :