Privacy Act 1993, s 67

The Privacy Commissioner can investigate complaints about breaches of privacy and other breaches of the privacy laws – for example, if a prison muster sheet was published online, or if the Parole Board doesn’t provide you with updates to your file when you ask for them.

Privacy Act 1993, s 68

Before complaining to the Privacy Commissioner you need to follow the internal complaints system, which means you should complain to your PCO as a first step.

You can make your complaint in writing or by calling the Privacy Commissioner (0800 803 909).

The Privacy Commissioner has several options. The Commissioner may try to arrange a settlement between you and the prison authorities, including an assurance (promise) from the prison that the interference with your privacy won’t happen again. Alternatively, the Commissioner may pass the complaint on to the Office of Human Rights Proceedings, which will decide whether to take a case against the prison to the Human Rights Review Tribunal.

Privacy Act 1993, s 71

Yes, the Privacy Commissioner can decide not to take action if you already have an existing remedy (another process for raising the problem) or right of appeal, or if the Commissioner believes your complaint is trivial, frivolous or vexatious or not made in good faith (in other words, your complaint is about something extremely minor or has only been made to cause trouble or you have some dishonest or improper motive in bringing the complaint).

The Privacy Commissioner may also decide that so much time has passed since the incident or failure that you’re complaining about that it would no longer be practicable or desirable to investigate it.

If the Commissioner decides not to take any action you can take a case yourself to the Human Rights Review Tribunal against the prison (see below).