Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

How should agencies deal with ‘empty-your-pocket’ requests? Mark McIlvride
22 February 2019 at 09:59

The most common complaints we investigate relate to individuals trying to access their personal information. Some of these requests are “empty-your-pocket” requests to the agency – in other words, requests for all the information held about the person concerned by the agency.

Improper disclosure leads to ostracism, death Sam Williams
21 February 2019 at 14:51

The Human Rights Review Tribunal recently found that the Parole Board breached the Privacy Act when it disclosed an offender’s parole address, with tragic consequences.

When can you withhold sensitive employment information? Ophelia Waite
22 August 2018 at 16:52

When a person makes a request for personal information, the agency responding to the request is entitled to withhold the information, if one of the exceptions to principle 6 of the Privacy Act applies.

Privacy beyond the grave Richard Stephen
24 July 2018 at 08:51

The Privacy Act doesn’t generally apply to dead people. This is because the Privacy Act protects the rights of “individuals”, and section 2 of the Act defines an individual as a “natural person, other than a deceased person”.

Check it before you chuck it - privacy and health rubbish Neil Sanson
5 April 2018 at 16:54

Reviewed and updated May 2025

Operation Painter: findings in privacy investigation 15 March 2018 at 09:00

A Police checkpoint in 2016 unlawfully and unfairly collected personal information, harming some of the people affected.

Handling health information of intersex individuals Vanessa Blackwood
2 March 2018 at 10:18

This blog post was reviewed and updated in March 2025. 

Advice for doctors when there’s a complaint Charles Mabbett
13 February 2018 at 12:14

If you work in a small practice or medical centre, there’s every chance you may not have received many requests for personal information from patients. The starting point is to know that the Privacy Act gives people the right to make a request for information that is about them.