Tools
Free tools for privacy deadlines, requests, breaches, indirect collection, exposure and self-assessment. They run in your browser. We don't store any of this information.
- Tools
- 6
- Your data
- Never leaves your device
- Sign-up
- None
All tools
- Privacy Act deadline calculatorWork out the last day an agency has to respond to a request for your personal information, using the statutory definition of a working day.1 minute. Gives the due date and every holiday it skips.
- Request letter builderWrite a request for the personal information an organisation holds about you, a correction request, or a follow-up when they miss the deadline.5 minutes. Writes a letter ready to send.
- Breach assessment recordWork through the serious-harm factors in section 113 of the Privacy Act and leave with a written record of your decision.15 minutes. Tells you whether to notify, with a record to keep.
- Indirect collection check (IPP 3A)Since 1 May 2026, if you get someone's personal information from anyone other than them, you usually have to tell them. Check whether you must, and draft the notice.5 minutes. Drafts the notice to send.
- Personal exposure auditWork through the places New Zealanders' names, addresses and routines are most often published, check yourself, and fix what you can.About an hour. Builds your action list, highest impact first.
- Privacy self-check for organisationsRate your organisation against the ten pou of the Privacy Commissioner's Poupou Matatapu guidance and get a prioritised list of what to fix first.15 minutes. Ranks what to fix first.
How these tools are built
Each tool is a static page with a small script. There are no servers, accounts or analytics behind them. Where a tool saves your progress, it uses your browser's storage on your device, and you can clear it with one button.
The legal logic is separate from the interface and covered by automated tests. The deadline calculator, for example, is tested against hand-worked examples covering Easter, Matariki, Mondayised holidays and the summer period. Read the code and tests in the repository.