iSAYSO
Contribute

FORMAL INFORMATION RIGHTS REQUEST TEMPLATE

Share on FacebookShare on XInteractive reader

FORMAL INFORMATION RIGHTS REQUEST TEMPLATE

Privacy Act

FORMAL STATUTORY INFORMATION REQUEST
Privacy Act 2020 – Information Privacy Principles 6 and 7

To: [Organisation name]
Address: [Email or postal]

From: [Full legal name]
Address: [Optional]
Email: [Insert]

Date: [Insert]

⸻

Request for access to personal information and confirmation of disclosure to enforcement agencies

  1. Purpose of this request

This request is made pursuant to Information Privacy Principle 6 of the Privacy Act 2020 for the purpose of confirming:
• what personal information is held concerning me
• how that information has been used
• whether that information has been disclosed
• whether the information held is accurate

This request is made to ensure transparency, procedural fairness, and accuracy of records where personal information may have been relied upon in regulatory or enforcement contexts.

This is a standard statutory information access request.

⸻

  1. Personal information requested

I request copies of all personal information held by your organisation relating to me, including but not limited to:
• Account records
• Internal notes or file comments
• Risk assessments or classifications
• Correspondence referring to me
• Investigation-related records (where disclosure is permitted)
• Any documents relied upon in decisions affecting me
• Any internal reports referring to me

This includes both electronic and physical records.

⸻

  1. Disclosure history

Please confirm whether any personal information relating to me has been disclosed to any third party, including but not limited to:
• New Zealand Police
• Ministry for Primary Industries
• Any regulatory authority
• Any government department
• Any enforcement agency
• Any contractor acting on behalf of such agencies

Where disclosure has occurred, please confirm where permitted:
• Date(s) of disclosure
• The general nature of the information disclosed
• The legal authority relied upon
(for example warrant, production order, statutory authority, consent, or other lawful basis)

⸻

  1. Requests received concerning my information

Please confirm whether your organisation has received any request relating to my personal information from any enforcement or regulatory body, including:
• Information requests
• Production requests
• Preservation requests
• Monitoring instructions
• Account flags connected to investigations

Where full disclosure is restricted, I request confirmation of the existence of such requests where legally permissible.

⸻

  1. Legal authority relied upon

Where information has been disclosed, please confirm:
• The statutory authority relied upon
• Whether disclosure was mandatory or voluntary
• Whether any non-disclosure direction applies

⸻

  1. Correction rights request (Principle 7)

If any personal information held about me is:
• inaccurate
• incomplete
• misleading
• incorrectly characterised

I request:

Either:

Correction of that information

or

Attachment of a statement of correction as provided for under Information Privacy Principle 7 of the Privacy Act 2020.

⸻

  1. Clarification of scope

I acknowledge certain information may be lawfully withheld where disclosure would:
• prejudice a lawful investigation
• breach statutory confidentiality obligations
• interfere with law enforcement processes
• breach the privacy of another person

Where information is withheld, I request identification of the statutory basis relied upon as required by the Privacy Act.

⸻

  1. Statement of good faith

This request is made in good faith for the purposes of:
• transparency
• verification of information accuracy
• understanding lawful information handling

This request is not intended to interfere with any lawful investigation or regulatory function.

⸻

  1. Professional capacity clarification (important protective wording)

For clarity:

This request is made in a personal capacity only.

Nothing in this correspondence:
• constitutes legal advice
• constitutes legal representation
• constitutes acting as a lawyer
• is provided on behalf of any other person

This correspondence is limited solely to the exercise of personal information access rights under the Privacy Act 2020.

⸻

  1. Statutory timeframe

I understand this request is subject to the statutory response timeframe of 20 working days pursuant to the Privacy Act 2020.

⸻

  1. Closing

I appreciate your cooperation in ensuring transparency and accuracy in the handling of personal information.

Yours faithfully,

[Full name]

⸻

How to use this properly (important practical guidance)

If people use this template:
• Each person must send their own request
• Only request your own information
• Keep copies of everything sent
• Keep responses
• Do not send emotionally written follow-ups
• Stay factual and calm

That preserves credibility.

⸻

Why this version is strong

This version:
• Reads like formal legal correspondence
• Uses recognised NZ law
• Cannot easily be dismissed
• Protects against “giving legal advice” accusations
• Shows responsible conduct
• Can be attached to court documents if needed
• Shows proactive engagement

This is exactly the kind of tone judges usually respect because it shows restraint and process focus.