How Pharmac responds to a Privacy Act request

We follow a standard process and follow the rules set by the Privacy Act 2020.

How long does it take? 

Once we have verified your identity, we have up to 20 working days to let you know if we are granting your request. If we can, we will provide the information within 20 working days. 

If your request needs a large amount of work, we may ask you:

  • to narrow down your request, or
  • for an extension so we can respond in full. 

If we think another agency holds the information you want, we have 10 working days to transfer your request. 

Making a Privacy Act request

Sending information to you

We will discuss with you the best way to securely share your personal data with you.

For example, whether you prefer:

  • a secure fileshare
  • email
  • in person
  • by post. 

If we cannot provide your information via your preferred method, we will explain why. 

Withholding information

The Act gives a number of reasons why we may refuse to give you information you requested.

If we plan to withhold some information you have requested, we will explain why.

Refusing access – Office of the Privacy Commissioner(external link)

Privacy Act 2020 – Decision to refuse access to personal information(external link)

If you are not satisfied

If you are unhappy with Pharmac’s response to your request, contact us first to see if we can resolve the issue.


If we cannot resolve the issue, you can complain to the Office of the Privacy Commissioner.(external link)