Access Your Personal Information in NZ — Privacy Act (2026)
About this article
Sourced from New Zealand Acts of Parliament (legislation.govt.nz), regulations, and official government guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Information Privacy Principle 6 of the Privacy Act 2020 gives you the right to ask any organisation — business or government — for the personal information it holds about you, and to be told it has that information. The agency must respond as soon as reasonably practicable, and no later than 20 working days after your request. Access is usually free (a business can only charge in limited circumstances).
There are some grounds to withhold (for example, where releasing it would endanger someone's safety or reveal another person's information), but the agency must tell you which ground it relies on. If it refuses, delays, or charges unreasonably, you can complain to the Office of the Privacy Commissioner (OPC).
When does it apply?
- You want to see what a company, employer or agency holds about you.
- You suspect a record about you is wrong or being misused.
- You need your own information for a dispute or claim.
What to do to access your personal information
- Put the request in writing and identify yourself; say you're making an IPP 6 request under the Privacy Act 2020.
- Be specific about the information you want to make it easier to locate.
- Note the 20-working-day deadline.
- Complain to the OPC (0800 803 909) if you're refused or ignored.
What should you NOT do?
- Don't accept silence — failing to respond in time is itself a breach.
- Don't pay a fee without questioning it — access is usually free.
- Don't assume government bodies use this route for general records — that's the Official Information Act.
About Data Privacy & Digital Rights in New Zealand
New Zealand's Privacy Act 2020 gives you real control over your personal information through 13 Information Privacy Principles (IPPs). You can access what an organisation holds about you (IPP 6) and ask it to correct mistakes (IPP 7), usually free and within 20 working days. Organisations that suffer a serious data breach must notify the Office of the Privacy Commissioner (OPC) and affected people. Complaints go to the OPC and, if needed, the Human Rights Review Tribunal, which can award damages. Government-held information is accessed under the Official Information Act 1982, and online harm is handled under the Harmful Digital Communications Act 2015.
OPC: 0800 803 909. Online harm (Netsafe): 0508 638 723.
Common Questions
What is the access your personal information right in New Zealand?
Information Privacy Principle 6 of the Privacy Act 2020 gives you the right to ask any organisation — business or government — for the personal information it holds about you, and to be told it has that information. The agency must respond as soon as reasonably practicable, and no later than 20 working days after your request. Access is usually free (a business can only charge in limited circumstances).There are some grounds to withhold (for example, where releasing it would endanger someone's safety or reveal another person's information), but the agency must tell you which ground it relies o...
When does it apply — access your personal information?
You want to see what a company, employer or agency holds about you.You suspect a record about you is wrong or being misused.You need your own information for a dispute or claim.
How do I request my personal information in New Zealand?
Put the request in writing and identify yourself; say you're making an IPP 6 request under the Privacy Act 2020.Be specific about the information you want to make it easier to locate.Note the 20-working-day deadline.Complain to the OPC (0800 803 909) if you're refused or ignored.
What should you NOT do — access your personal information?
Don't accept silence — failing to respond in time is itself a breach.Don't pay a fee without questioning it — access is usually free.Don't assume government bodies use this route for general records — that's the Official Information Act.