You can complain to us about the handling of your personal information by an Australian Government agency or any organisation the Privacy Act 1988 covers. The Privacy Act covers organisations with an annual turnover of more than $3 million, and some other organisations. You can also complain to us about the handling of your personal information by an Australian Capital Territory agency under the Information Privacy Act 2014 (ACT).

‘Handling your personal information’ means to collect, use or disclose your personal information. The Privacy Act doesn’t apply to the personal information of a deceased individual.

Generally, a complaint must be about a matter that occurred less than 12 months ago.

Your sensitive information

Personal information includes your sensitive information, for example:

You can complain about the handling of your sensitive information.

Before you complain to us

Contact the organisation or agency you think has mishandled your personal information to make a complaint. They should generally respond to your complaint in 30 days. If they don’t respond to your complaint, or you’re not satisfied with their response, you may lodge a complaint with us.