If your insurer asks you to pay for access to personal information about your claim, first clarify what the charge covers. Making a privacy access request is free. Providing access can involve a charge for a private organisation, but the charge cannot be excessive. Ask for an explanation and likely total before agreeing to paid work; do not assume either that every charge is unlawful or that paying buys an unrestricted claim file.
This is general information for Australian readers, not personal financial advice. Your policy, PDS, schedule and claim circumstances determine insurance benefits. Privacy access is separate from claim acceptance, repair authority and payment approval.
Separate the request from the cost of providing access
The Office of the Australian Information Commissioner’s access guidance distinguishes requesting information from receiving access. It says an organisation must explain that there is a charge and why. Possible costs include searching for and retrieving information, identifying relevant personal information, reproducing and sending it, postage or materials, and an intermediary where necessary.
Those examples are not permission to impose any amount without explanation. OAIC says an organisation cannot use a charge to discourage access. Its guidance also distinguishes organisations from government agencies: an agency cannot charge for providing access to personal information. Do not apply the agency rule automatically to a commercial insurer.
Describe the information you actually need
A request for everything connected with a claim can be harder to cost than a focused request. Identify the claim reference, relevant date range and personal information sought. For example, you might need the recorded description of an incident and your communications about it, rather than every document mentioning the insurer’s claims operations.
Australian privacy law gives a general right to your personal information, subject to lawful refusal grounds. It does not give an automatic right to unrelated commercial information or every unredacted document. Ask the insurer to explain which parts of your request it regards as outside personal-information access, rather than paying on the assumption that all requested material will be supplied.
Request a useful estimate before authorising payment
Send a short written enquiry through the insurer’s verified privacy contact channel. Keep the access request and the cost question together so the recipient can identify the relevant file. A practical wording is:
Please explain the proposed access charge, including the work and delivery costs included. Please provide the likely total, whether this is an estimate or a fixed amount, and options to reduce it. I would prefer electronic access if reasonable and practical. Please contact me before incurring costs beyond the amount we agree.
This wording is a proposed administrative request, not a guarantee that the insurer must accept a particular spending cap or format. Confirm its response before relying on an arrangement. Never send card details or identity documents to an unverified address merely because an email mentions your claim.
Consider narrower scope without losing the key evidence
OAIC says organisations should, where possible, indicate the likely charge when the request is made and discuss ways to minimise it. Electronic delivery rather than post is one example. Access must be provided in the requested way where reasonable and practical; alternatives should be explored if that is not possible.
In a hypothetical case, a claimant wants to check what they told the insurer during one week after an incident. Before accepting a broad retrieval estimate, they could ask whether limiting the date range and requesting electronic copies changes the cost. They should still preserve the original request and avoid removing material needed for their actual concern simply to obtain the smallest quote.
Keep access, corrections and claim deadlines separate
Receiving information does not correct it, reverse a claim decision or authorise repairs. If the material reveals a disputed fact, identify the separate correction or claims action you want. Where reports conflict, our guide to asking which findings support a claim decision addresses that different task.
Can I question the charge? Yes. Request its basis and alternatives first. OAIC’s guidance explains that people unhappy with an access decision can complain to OAIC. Privacy complaints are not themselves determinations of insurance coverage.
Does an access request stop other deadlines? Do not assume so. Keep responding to claim requests and obtain timely advice about any dispute or legal deadline. Save the estimate, agreed scope, payment record and information received as separate records.
