Who we are and whom we serve
The Data Rights Authority independently protects people whose information is processed by public institutions and their contractors. It serves record subjects, registrars, service operators and communities exposed to over-broad data sharing. A technically possible exchange is not automatically a lawful or appropriate purpose.
Choose your route
Office output: Audits data use, orders correction and refers contested restrictions to courts
People and households
Register a birth in a habitat
Decision owner: Citizenship & Mobility Commission
Reunite a family across regions
Decision owner: Citizenship & Mobility Commission
Replace a lost travel credential
Decision owner: Citizenship & Mobility Commission
Companies and cooperatives
Request public records
Decision owner: Archives, Libraries & Memory Commission
Obtain legal aid remotely
Decision owner: Justice & Legal Cooperation Commission
Research and civic organisations
Request public records
Decision owner: Archives, Libraries & Memory Commission
Obtain legal aid remotely
Decision owner: Justice & Legal Cooperation Commission
Public administrations
Register a birth in a habitat
Decision owner: Citizenship & Mobility Commission
Reunite a family across regions
Decision owner: Citizenship & Mobility Commission
Transfer voter participation
Decision owner: Independent Election Authority
What our teams do
The Authority reviews access, correction, consent scope, retention, data-sharing compacts and personal information used in consequential decisions. A correction preserves the original provenance and records the reason for a change. Sparse communities and linked registers require particular attention to indirect identification and reuse beyond the original service purpose.
Our decision powers and limits
Digital Systems & Communications Commission operates relevant systems and AI & Autonomous Systems Authority reviews autonomous decisions, but neither replaces independent data rights. The Authority does not use a privacy inquiry to acquire unrestricted personal records itself. Contested restrictions retain judicial review, and a service must explain an accessible alternative when standard identity evidence is unavailable.
Responsibilities and programmes
Where our powers stop
Digital Systems & Communications Commission operates relevant systems and AI & Autonomous Systems Authority reviews autonomous decisions, but neither replaces independent data rights. The Authority does not use a privacy inquiry to acquire unrestricted personal records itself. Contested restrictions retain judicial review, and a service must explain an accessible alternative when standard identity evidence is unavailable
Public records and accountability
DRA/REGAudits data use, orders correction and refers contested restrictions to courts.
Accessible assistance, evidence alternatives, institutional handoffs and review.