A7.10 Establishing identity

Privacy Act 1993 s.45

1. It is important to be assured of the identity of the individual making the request before releasing information.
2. Staff must not grant access unless they are satisfied that the information will be received only by the individual it is intended for or by that individual's agent if the agent makes a request on behalf of the client.
3. Staff must be satisfied that agents have the written authority of the individual concerned or are otherwise appropriately authorised to receive the information.
4. If a request is made by telephone or letter, staff must not release any information without first checking on the person making the request.
5. If the information requested is sensitive, staff must:
   1. ask for an address, and
   2. send the information by registered mail or courier.

Effective 26/07/1999