Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

Should agencies leave no stone unturned? Charles Mabbett
10 May 2017 at 09:31

Organisations sometimes get it wrong when they respond to a person’s request for their personal information. Information is sometimes lost, displaced or accidentally deleted. A recent privacy case dealt with by the Human Rights Review Tribunal considers when an organisation can call it quits when it comes to searching for personal information in responding to an access request.

How to make information available – some tips for agencies Lynley Cahill
4 April 2017 at 14:32

We live in an age where agencies collect and hold a lot of information about us. When we then request access to that information, this places demands on the time and resources of agencies to meet their obligations under the Privacy Act. Agencies sometimes feel a bit overwhelmed when responding to requests for personal information -  especially where a high volume of information is held.

Hager and Westpac - A bit more context, information and clarification Sam Grover
22 March 2017 at 09:50

There has been a significant amount of media coverage about our investigation into Westpac bank disclosing journalist Nicky Hager’s bank account information to Police in 2014. In the course of that reporting, some misconceptions have emerged. Because of the interest in the case, and the potential implications for future practice, we have noted some points of clarification and context below.

What to do in a phishing attack Neil Sanson,
20 March 2017 at 14:42

A recent data breach involved a deliberate email phishing attack on an organisation. The email looked like it came from the chief executive and requested a copy of the membership list (names and email addresses).

A design blueprint for privacy Riki Jamieson-Smyth
19 December 2016 at 11:26

This blog post was reviewed and some links updated in May 2025

Choose your referees wisely Richard Stephen
20 October 2016 at 10:06

Applying for a job can be a nerve-wracking ordeal and, more likely than not, it ends in disappointment. It can be devastating to miss out on that dream job and not knowing why you missed out can be incredibly frustrating.

Parents' right to know: Children's right to privacy Charles Mabbett
8 July 2016 at 12:21

Reviewed for relevance April 2025.

Health info: The right to know made easy Marilyn Andrew
31 May 2016 at 10:52

Mrs Patel was outraged. She’d visited her GP for a follow-up check after her hand surgery, and he’d asked her about her history of depression. She didn’t think she’d had anything of the sort, and decided to ask the receptionist for a copy of all her medical notes to see what else was in there. The young receptionist assured her that the doctor owned the notes so she couldn’t have them.