Office of the Privacy Commissioner

What is a “compliance advice letter”? Julia Broughton
9 September 2019 at 10:29

Investigating complaints is an important function of our office and a considerable part of our workload. When we receive a complaint, we make an initial assessment about what steps we will take next. In some circumstances, we will investigate. In other instances, our office may decline to investigate.

complaints

Digital services, privacy polices, and consent 2 September 2019 at 13:08

One of the most persistent problems of privacy and data protection in the digital age moving the responsibility from consumers needing to read terms and conditions for services they’re using to those services clearly explaining the choices and consequences that consumers have. We all know the problem, and it has been presented in several very striking ways. We’ve seen researchers print out and measure the length of the privacy policies and terms and conditions of popular services.

International, consent

Photocopying proof of identity Eve Kennedy
9 August 2019 at 15:41

A man complained to us last year after staff took a copy of his driver’s licence as he checked in to a hotel. The complainant was surprised that staff copied his licence and they couldn’t tell him why they needed the copy or how long they would keep it for.

IPP5 - storage & security, IPP9 - retention

Home DNA tests and privacy Feilidh Dwyer
6 August 2019 at 09:53

Reviewed for relevance April 2025.

health, data, DNA, 23andme, Ancestry.com

How should agencies deal with ‘empty-your-pocket’ requests? Mark McIlvride
22 February 2019 at 09:59

The most common complaints we investigate relate to individuals trying to access their personal information. Some of these requests are “empty-your-pocket” requests to the agency – in other words, requests for all the information held about the person concerned by the agency.

IPP6 - access

Improper disclosure leads to ostracism, death Sam Williams
21 February 2019 at 14:51

The Human Rights Review Tribunal recently found that the Parole Board breached the Privacy Act when it disclosed an offender’s parole address, with tragic consequences.

Human Rights Review Tribunal, information sharing, IPP11 - disclosure, law enforcement, breach

When can you withhold sensitive employment information? Ophelia Waite
22 August 2018 at 16:52

When a person makes a request for personal information, the agency responding to the request is entitled to withhold the information, if one of the exceptions to principle 6 of the Privacy Act applies.

employment, IPP6 - access, IPP11 - disclosure

Privacy beyond the grave Richard Stephen
24 July 2018 at 08:51

The Privacy Act doesn’t generally apply to dead people. This is because the Privacy Act protects the rights of “individuals”, and section 2 of the Act defines an individual as a “natural person, other than a deceased person”.

complaints, health, Health Information Privacy Code

What is a “compliance advice letter”? Julia Broughton 9 September 2019 at 10:29

Digital services, privacy polices, and consent 2 September 2019 at 13:08

Photocopying proof of identity Eve Kennedy 9 August 2019 at 15:41

Home DNA tests and privacy Feilidh Dwyer 6 August 2019 at 09:53

How should agencies deal with ‘empty-your-pocket’ requests? Mark McIlvride 22 February 2019 at 09:59

Improper disclosure leads to ostracism, death Sam Williams 21 February 2019 at 14:51

When can you withhold sensitive employment information? Ophelia Waite 22 August 2018 at 16:52

Privacy beyond the grave Richard Stephen 24 July 2018 at 08:51

What is a “compliance advice letter”? Julia Broughton
9 September 2019 at 10:29

Photocopying proof of identity Eve Kennedy
9 August 2019 at 15:41

Home DNA tests and privacy Feilidh Dwyer
6 August 2019 at 09:53

How should agencies deal with ‘empty-your-pocket’ requests? Mark McIlvride
22 February 2019 at 09:59

Improper disclosure leads to ostracism, death Sam Williams
21 February 2019 at 14:51

When can you withhold sensitive employment information? Ophelia Waite
22 August 2018 at 16:52

Privacy beyond the grave Richard Stephen
24 July 2018 at 08:51