The Privacy Commissioner has slammed a photography business which told a mother they would delete photos they'd taken of her children - but used them in their promo material two years later.
The mother took the business, Expression Sessions, up on its offer of a free photo shoot for children at a shopping centre in 2014.
She decided not to purchase the photos and was told they would be deleted, but last year found them being used in various advertising material, including a large print poster in a mall.
The Privacy Commissioner, John Edwards, found this breached four principles of the Privacy Act.
"Expression Sessions misled this woman about almost everything - how long the photos would be stored, who would see them, and even why they were taking them in the first place," he said in a decision released today.