Make a data breach complaint

On this page

  • You can complain if you haven’t been told about a data breach or other privacy-related matter
  • Complain to the relevant organisation or agency first
  • If you’re not happy with the response, you can complain to us

If you think that a data breach may affect your personal information and you haven‘t been notified, contact the organisation or agency that experienced the breach and ask them for information about the data breach (including whether your personal information was affected).

You can complain to us if you think an organisation or agency didn’t tell you quickly enough about a data breach that involved your personal information, if they were required to under the Notifiable Data Breaches scheme.

You can also complain to us if you think a data breach raises other privacy issues.

How to make a complaint

You must first complain to the organisation or agency that experienced the breach and give them a reasonable period to respond. We think that 30 days is a reasonable period.

If they don’t respond to your complaint, or you’re not satisfied with their response, you can complain to us.

Your complaint must be in writing. We can’t take it over the phone. 

Was this page helpful?

Thank you.

If you would like to provide more feedback, please email us at websitefeedback@oaic.gov.au