These guidelines cover :-

1. Deciding whether CCTV is right for you
2. Have a clear plan
3. Selecting and positioning cameras
4. Make people aware of the CCTV
5. Collecting only necessary images
6. Using the CCTV images
7. Storage and retention of images
8. Controlling who can see the images
9. Audit and evaluation

Full article link – https://privacy.org.nz/news-and-publications/guidance-resources/privacy-and-cctv-a-guide-to-the-privacy-act-for-businesses-agencies-and-organisations/