Human Assisted Reproductive Technology Act 2004

Information about donors of donated embryos or donated cells and donor offspring - Duties of keepers of information when information requests are made

45: Duty to ensure that person requesting information is authorised

You could also call this:

"Check who's asking for your info to keep it safe"

Illustration for Human Assisted Reproductive Technology Act 2004

When you ask for information, the person or organisation holding it must check who you are before giving it to you. They need to be sure you are who you say you are. You might be asking for the information for yourself, or someone else might be asking for it on your behalf, like an agent.

The organisation holding the information must have a good system in place to make sure the information gets to the right person. If someone is asking for the information on your behalf, they need to have your written permission to get it.

The person or organisation holding the information must make sure the agent has your permission to get the information, so they can be sure they are giving it to the right person or their authorised agent.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on 6 August 2025

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=DLM319364.

Topics:

Rights and equality > Privacy

44: Provisions not applicable to all information, or

"Some rules only apply to certain information that the law says must be kept."

46: Providers must give advice to prospective donors and prospective guardians, or

"People who help with donations must explain important things to donors and future parents before it happens."

Part 3Information about donors of donated embryos or donated cells and donor offspring
Duties of keepers of information when information requests are made

45Duty to ensure that person requesting information is authorised

When a person requests a provider or the Registrar-General to give the person access to information required to be kept by this Part, the provider or the Registrar-General must not give the person access to that information unless satisfied about the identity of the person who is making the request.
Each provider and the Registrar-General—
must adopt appropriate procedures to ensure that any information intended for a person is received—
1. only by that person; or
2. if the request is made by an agent of the person, only by that person or his or her agent; and
must ensure that, if the request is made by an agent of the person, the agent has the written authority of that person to obtain the information or is otherwise properly authorised by that person to obtain the information.