You may ask GCSB for personal information that you think we might hold about you. This type of information request is covered by the Privacy Act 1993.
You can contact us in a number of ways to request information
We would like:
We may ask you for more details.
Alternatively, you can use the AboutMe (Request My Info Tool) on the Office of the Privacy Commissioner’s website, which contains a form that you can fill in. It will automatically emailed to us.
We will acknowledge your request and are required by law to give you our decision on your request as soon as possible, and no later than 20 working days after we receive your request.
We will also let you know within ten working days if we need to transfer your request to another agency.
If we need more time to make our decision on your request, we will let you know and will give you an idea of how long it will take. You can complain to the Office of the Privacy Commissioner if you are not happy with our decision to extend the time.
If you would like to request information about someone else, such as a deceased relative, this type of request is treated as an OIA request. You should follow the guidance set out in the OIA section.
The objectives of GCSB are to contribute to the national security of New Zealand; the international relations and well-being of New Zealand; and the economic well-being of New Zealand.
Everything that we do needs to be in accordance with New Zealand law and New Zealand’s human rights obligations, and is subject to a very stringent warranting and oversight regime.
We aim to be as open as possible about our work. Due to the sensitive nature of what we do, however, revealing details about what we do or do not know can prejudice New Zealand’s interests. We could be the target of co-ordinated information requests from people who want to know if they are under investigation, and who may share responses with each other to draw conclusions about what we are or are not aware of or the nature of our capabilities.
This means that sometimes we may need to respond to a request for information with “we can neither confirm nor deny the existence or non-existence of information”. The following points can, however, provide reassurance about the protections that are in place for New Zealanders:
The attached fact sheet is something that we have prepared to provide information to the public about how we apply section 32 of the Privacy Act 1993 when responding to Privacy Act requests, and why we sometimes use the response “neither confirm nor deny”.