Key Takeaways
- The Biometric Capability Upgrade (BCU) project suffered from unclear finances, repeated cost overruns, and a lack of transparent reporting.
- An independent review found the project delivered no measurable benefits and described its financial management as “creative accounting” aimed at staying below a Cabinet‑mandated $35 million funding threshold.
- More than $30 million is estimated to have been wasted, with officials allegedly withholding information from ministers and avoiding required Cabinet approvals.
- The Public Service Commissioner has been asked to investigate integrity concerns, including possible misleading advice to ministers and the handling of staff who raised alarms.
- Despite repeated budget increases, the project never obtained formal Cabinet sign‑off, and after March 2024 there is no documentation explaining how costs were kept under the limit.
Project Overview and Initial Goals
The Biometric Capability Upgrade (BCU) was launched seven years ago as part of Immigration New Zealand’s (INZ) effort to modernise the Identity Management (IDme) system. Its purpose was to enhance the capture and storage of photographs, fingerprints, and other biometric data for visa and border processing. The project began under INZ’s delegated authority, which meant it was not initially classified as high‑risk and did not undergo the Treasury Gateway review process reserved for complex, high‑value initiatives.
Independent Review Findings
An independent report authored by Greg James concluded that the BCU delivered no measurable benefits and left officials unable to state a definitive total cost. The review highlighted that the rationale for several cost changes remained unclear, particularly those made in 2024 that triggered ministerial concern. It also noted that tracking total project expenditure had been “challenging,” with frequent transfers of funds between BCU and related works further obscuring the financial picture.
Cost Escalation and the IPE Merger
BCU was originally linked to another initiative called the In‑Person Enrolment (IPE) project; both aimed to upgrade core components of the IDme system. Over time, the two were merged, then later separated, complicating budgeting and accountability. Early estimates placed BCU’s whole‑of‑life cost (WOLC) at around $19.5 million, but by 2023 the figure had risen to $35 million, reflecting four separate increases in as many years. A 2024 briefing showed capital expenditure had doubled since 2019, pushing the project toward the Cabinet‑approval threshold.
Creative Accounting to Stay Under the Limit
Officials interviewed for the review described the project’s financial management as “creative accounting,” driven by a desire to avoid exceeding the Cabinet‑mandated $35 million limit that would trigger a request for additional funding approval. To keep the reported WOLC beneath this ceiling, approximately $4.44 million was transferred out of BCU between 2022 and 2025. These moves created widespread uncertainty about the true cost of delivery, with some staff saying they were unsure what the actual spending level was at any given time.
Ministerial Reaction and Alleged Waste
Immigration Minister Erica Stanford condemned the situation, stating that officials deliberately withheld information from her and the previous Labour government, resulting in more than $30 million of wasted expenditure. She described the findings as “almost as bad as it gets,” citing a lack of ministerial sign‑off at each stage of cost increase and advice that turned out to be “complete fiction.” Stanford emphasized that the project should have required Cabinet approval whenever the WOLC rose, a step that allegedly did not occur or was accompanied by minimal documentation.
Integrity Investigation Ordered
In response to the review, Stanford announced that Public Service Commissioner Sir Brian Roche would investigate integrity concerns raised by the report. The probe will examine whether ministers were misled about project progress, whether staff were removed from the project after raising concerns, and the extent of the “creative accounting” practices. The investigation aims to determine whether any breaches of public service standards occurred and to recommend corrective actions.
Timeline of Approvals and Cost Shifts
According to MBIE’s 2024 statement to RNZ, Cabinet approval is only required when a project’s WOLC exceeds $35 million. Joint ministers (believed to be the immigration and customs border ministers) approved the BCU upgrade under their delegated authority in July 2023. However, the independent report notes that a month earlier—June 2023—the BCU budget had already been increased to $31.95 million due to delays reported by technology vendor NEC, which pushed the go‑live date to November 2023. By autumn 2024, estimated costs had climbed to $39.9 million, seemingly surpassing the threshold, but by August 2024 the reported costs were said to have fallen back within the $35 million limit without a clear justification.
Lack of Documentation After March 2024
The review criticizes the absence of any project or governance documentation after March 2024 that explains how the WOLC was kept under the Cabinet limit despite ongoing delays and a planned mid‑2025 go‑live. James wrote that this gap was “even more surprising” given the project’s further schedule slip. Without records detailing the decisions that reduced reported costs, officials and ministers cannot verify whether the financial adjustments were legitimate or merely accounting maneuvers to avoid triggering higher‑level approvals.
Uncertainty About Total Expenditure
Current estimates place BCU’s cost at roughly $35 million and IPE’s at $8.5 million, though earlier records suggest BCU alone may have approached $40 million. The report concedes that “no-one really knows how much was spent,” reflecting the cumulative effect of fund transfers, inconsistent reporting, and the absence of a formal audit trail. This uncertainty undermines accountability and makes it difficult to assess the project’s value for money or to learn lessons for future IT upgrades.
Lessons and Implications for Future Projects
The BCU episode underscores the importance of robust financial oversight, timely escalation to Cabinet when thresholds are approached, and transparent documentation of all budgetary decisions. It highlights the danger of treating large, complex IT upgrades as low‑risk simply because they begin under a department’s delegated authority. Moving forward, agencies should ensure that any project with the potential to exceed approved funding limits undergoes the full Treasury Gateway review, maintains clear change‑control logs, and provides ministers with accurate, verifiable advice. Only through such safeguards can similar waste and erosion of public trust be prevented.

