Government & law
What can I do if an organisation misuses my personal information?
The Privacy Commissioner handles complaints about how agencies collect, use, and share personal information.
Organisations must follow the Privacy Act when they handle personal information — including employers, landlords, schools, health providers, and businesses. You can ask what they hold about you and why.
If you cannot fix an issue directly, the Office of the Privacy Commissioner explains how to complain. Examples include data breaches, sharing information without a proper reason, or refusing access to your own records.
Keep copies of requests and replies. Serious harm may need faster pathways — the Commissioner’s site is the official guide. Not legal advice.
Official resources
Always confirm details on the official site — laws and processes can change.
Educational signposting only from the Resilience Programme. Not legal, financial, or medical advice. Updated 2026-07-10.