You can complain to us about the handling of your personal information by an Australian Government agency or any organisation the Privacy Act 1988 covers. The Privacy Act covers organisations with an annual turnover of more than $3 million, and some other organisations.
‘Handling your personal information’ means to collect, use or disclose your personal information. The Privacy Act doesn’t apply to the personal information of a deceased individual.
Generally, a complaint must be about a matter that occurred less than 12 months ago.
Your sensitive information
Personal information includes your sensitive information, for example:
- your My Health Record
- your individual healthcare identifier
- your genetic information
- your credit report
- your tax file number
- the information the Medicare Benefits Scheme or the Pharmaceutical Benefits Scheme holds about you
- your criminal record (such as a spent conviction)
- information the Personal Property Securities Register holds about you.
You can complain about the handling of your sensitive information.
Before you complain to us
Contact the organisation or agency you think has mishandled your personal information to make a complaint. They should generally respond to your complaint in 30 days. If they don’t respond to your complaint, or you’re not satisfied with their response, you may lodge a complaint with us.
