If you think that a data breach may affect your personal information and you haven‘t been notified, contact the organisation or agency that experienced the breach and ask them for information about the data breach (including whether your personal information was affected).
You can complain to us if you think an organisation or agency didn’t tell you quickly enough about a data breach that involved your personal information, if they were required to under the Notifiable Data Breaches scheme.
You can also complain to us if you think a data breach raises other privacy issues.
How to make a complaint
You must first complain to the organisation or agency that experienced the breach and give them a reasonable period to respond. We think that 30 days is a reasonable period.
If they don’t respond to your complaint, or you’re not satisfied with their response, you can complain to us.
Your complaint must be in writing. We can’t take it over the phone.
