How do I find out what information a company holds about me?

Who you can ask

Any business, charity, club, school, council or government department in New Zealand, and overseas companies doing business here. That includes your bank, employer, former employer, landlord, gym, insurer, phone company, social media platforms, and the shop with your loyalty card.

What to ask for

You can ask for everything or something specific. Being specific is usually faster:

• “All emails and notes that mention me since March 2026”
• “CCTV footage of me at your Ponsonby store on 3 October 2026 between 2pm and 3pm”
• “Recordings of my calls with your call centre”
• “The information you used to decline my application, and where you got it”

Personal information includes opinions about you, notes, recordings and images, and information a supplier holds for the organisation.

How to send it

1. Find the organisation’s privacy officer, usually through its privacy statement. Every organisation must have one.
2. Email or write. You don’t need a form or to mention the Act, but naming it helps.
3. Keep a copy and note the date it was received.

Our request letter builder writes the letter. The Privacy Commissioner’s AboutMe tool can also send requests for you.

What happens next

• They may ask you to confirm your identity.
• They must respond within 20 working days.
• Public sector agencies generally can’t charge. Private organisations can only charge in limited circumstances and must tell you first.
• They can withhold some information for reasons the Act lists, such as protecting someone else’s privacy, but they must tell you what they’ve withheld and why, and that you can complain.

If they don’t respond or refuse

Send a reminder. If that doesn’t work, complain to the Privacy Commissioner. It’s free.