Tūhono│Connect

If you are concerned an agency (business or organisation) has breached the Privacy Act, you can tell us about it. We will assess your concerns in confidence.

It might not always be possible for us to formally investigate your concerns. Some reasons why we wouldn’t include:

If there is limited evidence that the agency is breaching the Privacy Act.
If we’re already aware of the issues.
Because of other serious issues we’re investigating (we unfortunately can’t do everything).
If the issues do not warrant formal action by our Office at this time. Read our Compliance and Regulatory Action Framework (CARAF) to see how we investigate agencies).

However, telling us your concerns is useful to inform our regulatory approach to privacy issues.

If you want to report serious privacy wrongdoing in your own workplace, we can work with you in case your concern is a protected disclosure or is better addressed through another process.

Email us at compliance@privacy.org.nz