Section 57 — Privacy Act 2020: Responsibilities of agency before giving access to personal information

57 Responsibilities of agency before giving access to personal information If an agency receives a request to access personal information, the agency— (a) may give access to the information only if the agency is satisfied of the identity of the requestor; and (b) must not give access to the information if the agency has reasonable grounds to believe that the request is made under the threat of physical or mental harm; and (c) must ensure, by the adoption of appropriate procedures, that any information intended for a requestor is received— (i) only by that requestor; or (ii) if the request is made by a requestor as the representative of an individual, only by the requestor or the individual; and (d) must ensure that, if the request is made by a requestor as agent for an individual, the requestor has the written authority of the individual to obtain the information, or is otherwise properly authorised by the individual to obtain the information. Compare: 1993 No 28 s 45