The Human Rights Review Tribunal recently found that the Parole Board breached the Privacy Act when it disclosed an offender’s parole address, with tragic consequences.

Reviewed May 2025 (previously titled ‘Can I tell the cops? A guide for health professionals.’

Organisations sometimes get it wrong when they respond to a person’s request for their personal information. Information is sometimes lost, displaced or accidentally deleted. A recent privacy case dealt with by the Human Rights Review Tribunal considers when an organisation can call it quits when it comes to searching for personal information in responding to an access request.

There has been a significant amount of media coverage about our investigation into Westpac bank disclosing journalist Nicky Hager’s bank account information to Police in 2014. In the course of that reporting, some misconceptions have emerged. Because of the interest in the case, and the potential implications for future practice, we have noted some points of clarification and context below.