NEWS ALERT: Who’s Accessing Your Phone & Bank Data — Without You Knowing?

Across New Zealand, a pattern is emerging.

Individuals are submitting formal requests under the Privacy Act 2020 and the Official Information Act 1982 to banks and telecommunications providers. What is being revealed is not always what is disclosed — but what is withheld, narrowed, or redirected.

What We’re Seeing

Complete denials: Organisations claim no information is held about disclosures.

Partial responses: Only limited aspects of requests are answered.

Redirection: Individuals are told to ask third-party agencies instead.

Scope control: Responses are narrowed to avoid full disclosure.

What the Law Allows

Under the Privacy Act 2020, organisations may disclose personal information without consent in specific circumstances, including law enforcement, maintenance of the law, and compliance with legal processes. These disclosures often occur without notification to the individual.

Why This Matters

If personal information is accessed or shared without your knowledge, decisions may be made about you based on information you have not seen and cannot challenge in real time.

The Real Risk

The system relies on internal decision-making with limited external visibility. Individuals are often left responding after consequences have already occurred.

What We’re Doing

Issuing structured Privacy Act requests to banks and telecommunications providers.

Requesting disclosure histories and legal authority for information sharing.

Tracking inconsistencies in responses.

Escalating incomplete or evasive replies.

What You Can Do

You have the right to request:
– What personal information is held about you
– Who it has been shared with
– The legal basis for any disclosure

[INSERT LINK: Request Template / Guide]

Final Note

This is not about whether agencies can request information. It is about whether you are informed, whether you can verify it, and whether you can challenge it.