Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

Privacy Act 2020

This refusal ground is designed to protect the privacy of people other than the requester. A requester's right to access information about themselves is very strong, but sometimes other people's privacy rights are more important.

This refusal ground is most often used in situations where information about the requester is also information about someone else. For example, suppose a file contains information about why a child was placed in foster care. One parent asks for access to information about themselves from the file. Information on the file about that parent may have come from other people in the family, or may involve details of family relationships. The information is about both the parent and those other people, including the child. The organisation needs to think about the privacy of those other people as well.

Another common situation is where one person makes a complaint about another's behaviour. It is important that the person who the complaint is against should know enough to be able to have their say. But the complainant may also have given details of how the behaviour affected them personally, or may not wish to be named. In that situation, the agency also needs to consider the complainant's privacy. This section shows the agency what steps to take.

Privacy Act 2020 reference:

53. Other reasons for refusing access to personal information
An agency may refuse access to any personal information requested if—
(b) the disclosure of the information would involve the unwarranted disclosure of the affairs of—
(i) another individual; or
(ii) a deceased person
 

Further information:

What are someone's 'affairs'?

In practice, 'affairs' means any information about the other individual, including who they are. Although “affairs” was generally to be understood as requiring a course of conduct (see case O v N (CRT 19/94 Decision No 4/96), a single event or action might also be included.

Should an agency use this section to withhold information that is only about other people, not the requester?

No. The requester is not entitled to get access to information about other people under principle 6.

This refusal ground only applies to information that is about the requester and also includes information about other people. However, you cannot automatically redact information that is about more than one person. You need to balance the privacy interests. 

When will the other person's privacy be more important than the requester's right of access?

Requesters have a strong right of access to information about themselves. This means that the other person's privacy interests must be even stronger before the information can be withheld. In wording of the legislation, the disclosure of information about the other person must be 'unwarranted'. To decide whether the disclosure would be unwarranted, the requester's privacy rights are balanced against the other person's privacy rights.

Some useful tips to help consider whether the other person's privacy interests are stronger than the requester's right of access are:

  • how sensitive is the information about the other person? The more sensitive the details are, the more likely it is to outweigh the requester's right of access
  • does the other person object to the requester getting the information? If the other person doesn't mind, then giving it to the requester won't be a problem
  • what harm might there be to the other person if the requester gets the information? Slight embarrassment isn't likely enough to outweigh the requester's right of access, but serious embarrassment might well be. If the disclosure would likely expose the other person to harassment, this could well be relevant (see also section 49(1)(a)(ii) of the Privacy Act). Serious damage to relationships may also be enough (see Case Note 25473)
  • The effect on the other person may depend on their individual situation, for instance whether they live in a small community or what their home circumstances are
  • is it necessary to disclose the information to make sure that the requester has a full and fair opportunity to respond to any allegations made against them? If the requester can have their say without the information, it is more likely that the other person's privacy rights will outweigh the requester's right of access (see Case Note 83694)
  • is it clear that the requester already knows the information about the other person? If so, releasing it is less likely to be an unwarranted breach of the other person's privacy (see Case Note 84948)
     
Can an organisation use this ground to refuse to tell me who informed on me?

Quite possibly, though this will depend on whether the disclosure of the information would be unwarranted. This might be the case where the informant expressly asked the organisation to withhold their identity from you. This might also be the case where the organisation thinks that revealing the identity of the informant may put that person in danger. If the organisation has a law enforcement function, the maintenance of the law withholding ground may be more relevant. The organisation can also withhold information on safety grounds.

 

Return to the principle 6 page