She may be entitled to the record under the Privacy Act. Privacy law is very complicated but, generally speaking, you are allowed to access and correct information about you held by others, where the other person is subject to the Privacy Act. Corporations with a sufficiently high turnover are subject to the Act.