Collecting and using biometric information
We use biometric information, like photographs, fingerprints and iris scans to verify your identity.
Biometric information
We collect and use biometric information, like photographs and fingerprints to establish and verify your identity, and to help us make immigration decisions.
What is biometric information
Biometric information is personal information about a physical characteristic that can be used for biometric processing.
The types of biometric information we are authorised to collect and use under the Immigration Act 2009 are:
- facial images
- fingerprints, and
- iris scans.
The biometric information types we collect and process are:
- facial images
- fingerprints.
Why we use biometric information
Reliable identity information is essential to New Zealand’s immigration system. We use biometric information because names, dates of birth and documents may not always provide enough confidence about a person’s identity.
New Zealand uses biometrics to counter identity fraud. Fraud may hide a criminal record or be used falsely to claim refugee status.
Immigration fraud damages New Zealand because it displaces genuine immigrants. It is expensive and time-consuming to fix.
Detecting fraud using biometrics:
- reduces the cost of managing our border
- enables early detection of fraud
- improves public safety by limiting the ability of criminals and terrorists to slip through.
How we use biometric information
The Immigration Act 2009 (the Act) authorises us to collect and use biometric information for immigration purposes. We handle biometric information in accordance with the Privacy Act 2020 and the Biometric Processing Privacy Code 2025.
We collect, indirectly and directly, both photographs and fingerprints to:
- identify and check the identity of foreigners seeking resettlement
- help identify refugees under New Zealand’s quota programme
- identify and check people under investigation at the border
- record the identity of deportees and stop them re-entering New Zealand under another identity
- identify and check people suspected of breaching the Act
- expose assumed identities
- support lawful information sharing with approved domestic or overseas agencies (go to the 'Biometric information sharing' section on this page to learn more).
Unless an exception applies, we will take reasonable steps to tell you:
- when we intend to collect your biometric information (or as soon as practicable after collection)
- why it is being collected
- who may receive it
- whether providing it is authorised or required by or under the law
- what may happen if you don’t provide it
You will have the opportunity to see the information and the right to dispute its accuracy.
The Immigration Act 2009 requires us to collect your biometric information when you apply for a visa or request an NZeTA. If you refuse, we can reject your application or request.
Although New Zealand citizens provide biometric information in the form of a face image through their passports, we never collect their fingerprints.
Who holds your biometric information
MBIE is the agency that holds this biometric information. MBIE’s address is:
Ministry of Business, Innovation and Employment
PO Box 1473
Wellington 6140
New Zealand
Biometric information sharing
The Immigration Act 2009 (the Act) also authorises us to disclose biometric information for immigration purposes.
New Zealand is a member of the Migration Five (M5). The M5 is a group of countries who have agreements to exchange information on immigration matters. Its members are:
- New Zealand
- Australia
- Canada
- United Kingdom
- United States of America
The M5 shares fingerprint information to detect immigration and identity fraud. When 1 member asks for fingerprint information from another, the receiving country destroys the fingerprint if it finds no match. Members do not share biographic data like names or personal details unless they match a fingerprint. In some circumstances, members may undertake ad hoc sharing of biographic and biometric information. They do not share their own citizens’ data.
Information that members share can support enforcement of immigration law, including prosecution and deportation of individuals.
Where we disclose biometric information outside New Zealand, we will do so only where there is legal authority and appropriate privacy safeguards.
We may also share biometric information with other New Zealand government agencies, service providers acting for INZ, and overseas immigration or law enforcement agencies where this is authorised or required by law. This must be directly related to the purpose for which the information was collected, or otherwise permitted by relevant laws, including the Privacy Act 2020, Biometric Processing Privacy Code 2025 and the Immigration Act 2009.
Safeguards, retention and your rights
We collect biometric information only where it is necessary for a lawful immigration purpose and where biometric processing is effective, proportionate, and authorised by law.
We protect this information through safeguards such as:
- physical and technical access controls
- staff training
- audit logging
- secure transmission, and
- business processes.
We do not use biometric information for biometric categorisation.
We retain most biometric information for 50 years before it is destroyed. Some are retained for less. For example, DNA test results are destroyed within 24 months.
For a detailed list of the minimum retention period by information class and type, check the MBIE disposal authority schedule:
Disposal authority DA644 — Collections New Zealand
Access or correct your biometric information
You have the right:
- to know if we hold biometric information about you
- to know what type we hold, and
- to request access to or correction of that information.
To request access to, or correction of, information we hold about you, complete our online form.
Request or change your personal information
You can raise concerns or make a complaint about our handling of biometric information through our complaints process.
Complain about Immigration New Zealand services and processes
You can also submit a complaint to the Privacy Commissioner regarding our actions in respect of the Biometric Processing Privacy Code 2025.
Privacy impact assessments and further information
We have completed privacy impact assessments for biometric processing and information-sharing arrangements, including consultation with the Office of the Privacy Commissioner where required.