What you can complain to us about

If you are concerned about how your Consumer Data Right (CDR) data has been handled by a business, you can lodge a complaint with the OAIC.

Your CDR data includes information about you such as your name and contact details, as well as detailed information about your use of a specific product or service.

Issues you might believe were mishandled may relate to:

  • collection of CDR data without your consent
  • notification of certain matters, including what data was collected and when
  • consent that has been bundled, coerced, not explicit or unauthorised
  • use and/or disclosure of your data
  • open and transparent management of your data
  • quality of your data
  • correction of your data
  • failure to ensure accuracy or completeness of your data
  • failure to allow anonymity/pseudonymity
  • failure to destroy unsolicited data
  • security of your data
  • failure to advise of a data breach involving your data.

Generally, a complaint must be about a matter that occurred less than 12 months ago. It can be hard to investigate effectively and fairly for both parties beyond this period.

We may refer your complaint to an external dispute resolution scheme or to the Australian Competition and Consumer Commission if we consider they are best placed to review the matter. We will notify you if we refer your complaint.

Before you lodge a complaint with us, take a few minutes to see if we are able to investigate.