A7.15 Establishing identity

See also Privacy Act 2020 s 57

1. It is important to be assured of the identity of the individual making the request before releasing information.
2. Staff must not grant access unless they are satisfied that the information will be received only by the individual it is intended for or by that individual's agent if the agent makes a request on behalf of the client.
3. Staff must be satisfied that agents have the written authority of the individual concerned or are otherwise appropriately authorised to receive the information.
4. If a request is made by telephone or letter, staff must not release any information without first confirming the identity of the person making the request.

Effective 28/01/2021