Will the Privacy Commissioner issue an access direction for all access request complaints?

No. Issuing an access direction is not automatic and will depend on the circumstances. The Commissioner will act in accordance with the Compliance and Regulatory Action Framework in making decisions about issuing access directions For example, the Commissioner will take into account whether an organisation has constructively engaged with our office or has demonstrated a willingness to resolve the complaint.

Other factors the Commissioner will consider before deciding whether to issue an access direction include the nature of the information, whether it is urgently needed, the seriousness of the breach, the likelihood of a repeat of the breach, and whether there are more appropriate alternate remedies to the complaint.

Read more about access directions.

Updated November 2025