The APF is an all-volunteer advocacy group. It examines technologies and practices, it develops policy, it lobbies governments for improvements in laws, and it lobbies organisations of all kinds for improvements in their practices.
But APF does not have the resources to advise on or assist with complaints on behalf of individuals.
The purpose of this document is to provide information for people who want to do something about privacy-invasive behaviour. It provides an outline of how to go about making a complaint, followed by the contact points for bodies that have the power to receive and investigate complaints about privacy-invasive behaviour.
The links in this page are reviewed periodically. Please advise any broken links, or suggested enhancements, to the APF Web-Team.
Who to Complain to
Complaint-handling bodies will generally not consider a complaint unless the matter has already been raised with the organisation that’s being complained about. That’s partly because complaint-handling bodies are under-resourced and have to assign priorities to the complaints that they receive. But it’s also because organisations should have the problem brought to their attention by the people who are upset about it, and should have the opportunity to address the problem without any third parties getting involved. (Some organisations are not very good at this; but some not only have complaint-handling processes in place, but actually handle complaints quite well).
So Rule Number 1 is to address the complaint in the first instance to the organisation that’s causing the problem. Later, if you haven’t got satisfaction from that organisation, there may be somewhere appropriate to escalate it to.
Preparing a Complaint
To be effective, a complaint needs to communicate clearly to the organisation what happened, and why it’s a problem.
For relatively simple problems, a phone-call or a personal meeting may be a good way to start. But even with simple problems, it’s advisable to get the facts clear in your mind, and commit the key pieces of information to paper.
For more complex problems, it is much better to express the complaint in writing. Organisations prefer this, partly a way of reducing the number of complaints that they have to handle (because many people don’t take the time to prepare a letter), but also as a means of making sure that they understand what the problem is. Some organisations say that a complaint has to be in writing, and even on a particular form that they’ve designed. But if you would have trouble doing that, contact the body by telephone and explain your situation.
It’s important to keep a copy of all correspondence, and to note the date and time of each conversation, and the name of the person you talk to. These need to be included in documents you submit, to assist the organisation to conduct its investigation.
Some organisations may be willing to help you to prepare a complaint. Your local community legal centre might be able to help. You could consider paying a private lawyer to assist you. Depending on the details, you may be also able to get help from other sources.
In addition, some of the complaint-handling bodies listed below provide advice on how to prepare a complaint. The Ombudsman’s Office provides Tips on Resolving Complaints and Disputes, The Commonwealth Government site for consumers (run by the Department of the Treasury) provides a Fact Sheet on Steps in Making a Complaint, and the Victorian Consumer Affairs Bureau offers Ten Top Tips for Letters of Complaint.
See also Complaint Line’s Advice on Making a Complaint, and its Privacy Complaints Page.
Looking at it from the other side, a number of documents provide guidance to businesses in the handling of complaints. The Western Australian government offers a Guide to Companies on When Customers Complain, and Complaints Handling Guidelines for Traders. Another similar document is the Commonwealth government’s ‘Best Practice Model’ for Complaint Handling and Dispute Resolution for eCommerce. These are probably simplified versions of an ACCC report called ‘Benchmarks for dispute avoidance and resolution : a guide’, of October 1997 (60 pages), available in PDF format.
Escalating a Complaint
Some complaints are satisfactorily dealt with by the organisation that caused the problem. But some aren’t. If you’re not satisfied with what you’ve achieved, and want to go further, you need to seek out a complaint-handling body that deals with that particular kind of problem. You may want to seek assistance from someone in order to select the right organisation to address the complaint to, and to prepare the complaint in the most effective manner. Relevant advisors include your local community legal centre and lawyers more generally.
There’s a variety of complaint-handling organisations. Some of them are government agencies, some are independent but government-funded, and some are associations or even businesses. Some will assist you gratis, and some (such as professional lawyers) may charge a fee. Some have powers that they can exercise over the organisation you’re complaining about, and some have no power at all. Some complaint-handling bodies deal only with very specific matters, or a particular industry sector. Some are restricted to a particular State or Territory, whereas others are national. Some can address all aspects of privacy (including privacy of the person, privacy of personal behaviour, and privacy of personal communications); but many are limited to privacy of personal data. Some are specialist privacy organisations, but some have a wide scope which includes privacy as just one element.
The lists below provide information about complaint-handling organisations. You may need to read the whole list, in order to work out which one or two appear to be most relevant to the particular problem you are dealing with.
Complaint-Handling Bodies
‘Privacy Commissioners’ have been created by three Parliaments. Their scope encompasses the public sector in four of the country’s nine jurisdictions, and some of the private sector. Among other responsibilities, they handle complaints about a variety of matters. They are:
- The Federal Privacy Commissioner and the Office of the Federal Privacy Commissioner (OFPC). Specific guidance is provided on the Privacy Complaints Page. The scope of the OFPC extends to:
- the private sector generally;
- the credit reporting industry in particular;
- the Commonwealth public sector; and
- the A.C.T. public sector;
- The N.S.W. Privacy Commissioner. The scope of the New South Wales Privacy Commission (Privacy NSW) extends to:
- the N.S.W. public sector; and
- privacy-invasive behaviour in the State of N.S.W. more generally;
- The Victorian Privacy Commissioner. The scope of the Office of the Victorian Privacy Commissioner (OVPC, or Privacy Victoria) extends tothe Victorian public sector.
- The S.A. Privacy Committee. It is unclear whether the Privacy Committee of S.A. actually does anything, but according to a government web-site it exists, with a phone-number and email-address to which complaints can be addressed.
- In the A.C.T., contact the Office of the Federal Privacy Commissioner (OFPC). Specific guidance is provided on the Privacy Complaints Page.
If the matter is of an administrative nature, then it may be more appropriate to submit it to an Ombudsman, or some other specialist complaints body. The Commonwealth Ombudsman maintains a list of bodies that handle complaints. The wide range of additional organisations that may be prepared to handle complaints of particular kinds. They are listed below under the following headings:
National
The Office of the Federal Privacy Commissioner provides a Guide to Privacy Laws in Australia, which may help orient you to what follows.
The following organisations may be prepared to consider complaints about behaviour anywhere in Australia that breaches privacy laws, codes, or expectations:
- Banking. Australian Banking Industry Ombudsman
- Credit Union Complaint Schemes, operated by Credit Union Dispute Resolution Centre in Melbourne, Endispute in Perth, and the Credit Union Ombudsman in Brisbane
- Credit Reporting. The primary credit reporting agency is Baycorp Advantage, formerly called Credit Advantage, and, before it was privatised, CRAA (Credit Reference Association of Australia). Here are instructions on how to get a copy of your own credit record. Instructions on how to make a complaint are deeply embedded in the company’s privacy statement, or you can use a telephone number: +61 2 9464 6000. Amazingly, the Consumer Credit Code appears not to even mention the word ‘privacy’
- Insurance. The general insurance and related industries are covered by the General Insurance Information Privacy Code. Information about the code is on the site of the Insurance Council of Australia and the complaint-handling body is the Insurance Enquiries and Complaints Limited (IEC)
- Private Health Insurance. Private Health Insurance Ombudsman
- Superannuation. Superannuation Complaints Tribunal
- Financial Services, Other. Financial Industry Complaints Scheme Limited, covering life insurance, superannuation, funds management, financial advice, stock broking, investment advice and sales of financial or investment products
- Telecommunications. The Telecommunications Industry Ombudsman (TIO) considers complaints about non-compliance with industry-specific privacy standards. He also considers complaints about non-compliance with the National Privacy Principles in the Commonwealth Privacy Act by companies in the telecommunications industry that have an annual turnover of $3 million or more
- Direct Marketing. Australian Direct Marketing Association (ADMA), and the Commonwealth Government’s Direct Marketing Model Code of Practice Complaint and Dispute Handling Recommendations
- The Commonwealth Ombudsman. The Commonwealth Ombudsman, in relation to administrative processes in Commonwealth Government agencies
- ACCC. The Australian Competition and Consumer Commission (ACCC) has some responsibilities in relation to consumer protection. Privacy is treated as a very small corner of that area, but sometimes attracts the Commission’s attention
The following are some relevant Consumer Associations:
- Australian Consumers’ Association (ACA)
- Consumers’ Health Forum of Australia
- Financial Services Consumer Policy Centre
- Whistleblowers Australia
States and Territories
The Office of the Federal Privacy Commissioner provides a Guide to State Privacy Laws, which may help orient you to what follows. The Commonwealth Ombudsman maintains a list of State and Territory Ombudsman addresses.
The following organisations may be prepared to consider complaints about behaviour within each State and Territory that breaches privacy laws, codes, or expectations:
N.S.W.
- New South Wales Privacy Commission (Privacy NSW) – in relation to the N.S.W. public sector, and privacy-invasive behaviour generally
- N.S.W. Health Care Complaints Commission
- N.S.W. Department of Fair Trading, and in particular its Resolve a consumer, trader or tenancy problem page
- The N.S.W. Ombudsman, in relation to administrative processes in government agencies
- N.S.W. Independent Commission Against Corruption (ICAC)
- Energy & Water Ombudsman NSW (EWON)
- Real Estate Institute of NSW
- N.S.W. Motor Vehicle Repair Industry Authority (MVRIA)
- Consumer, Trader & Tenancy Tribunal
- The Accommodation Rights Service
- Community Legal Centres
Victoria
- Office of the Victorian Privacy Commissioner (OVPC, or Privacy Victoria) – in relation to the Victorian public sector, and privacy-invasive behaviour generally, but not health (because a specialist Office exists to address those matters)
- Victoria: Office of the Health Services Commissioner
- Consumer Affairs Victoria, including its Enquiries and Complaints Page
- The Victorian Ombudsman, in relation to administrative processes in government agencies
- Energy & Water Ombudsman (Victoria) Limited
- Financial and Consumer Rights Council (FCRC) , which styles itself as the peak body for Financial Counselling and Consumer Support services in Victoria
- Residential Care Rights
- Community Legal Centres
Queensland
- Complaints about government agencies not complying with the Information Privacy Standards (Information Standard 42A for the Department of Health, and Information Standard 42 for all the other government agencies) must be handled by the agency itself
- Office of the Information Commissioner (Qld)
- Complaints about misconduct in the public sector can also be made to the Queensland Crime and Misconduct Commission
- Advice and complaints about getting access to personal information held by public sector agencies, under Freedom of Information legislation, is available from the Office of the Information Commissioner
- Registered and licensed clubs in Queensland that are members of Clubs Queensland, may choose to handle personal information in accordance with a voluntary Queensland Club Industry Privacy Code. Complaints about breaches of the code that are not resolved by the relevant club may be referred to the Federal Privacy Commissioner.
- Queensland Office of Fair Trading
- Queensland health Rights Commission
- The Queensland Ombudsman, in relation to administrative processes in government agencies
- Older Persons Advocacy Service
- Community Legal Centres
Western Australia
- There is no state-based privacy protection in place. An Information Privacy Bill was tabled on 28 March 2007. This would establish a Privacy & Information Commissioner, although perhaps not a full-time position
- Dept. of Consumer and Employment Protection, Consumer Protection Division
- The W.A. Ombudsman, in relation to administrative processes in government agencies
- Advocare (for people living in residential aged care facilities or receiving Home and Community Care Services)
- Community Legal Centres
South Australia
- There appears to be very little state based protection in place, although there is a limited (and maybe even non-existent) Privacy Committee, and a limited Administrative Instruction
- Office of Consumer and Business Affairs
- The S.A. Ombudsman, in relation to administrative processes in government agencies
- Electricity Industry Ombudsman
- Aged Rights Advocacy Service Inc
- Community Legal Centres
Tasmania
- there appears to be very little state based protection in place
- Office of Consumer Affairs and Fair Trading
- The Tasmanian Ombudsman, in relation to administrative processes in government agencies
- Office of the Electricity Ombudsman
- Advocacy Tasmania Inc
- Community Legal Centres
A.C.T.
- Office of the Federal Privacy Commissioner (OFPC) – in relation to the private sector generally, especially the credit reporting industry, the Commonwealth public sector, and the A.C.T. public sector
- A.C.T. Community & Health Services Complaints Commissioner, Level 5, Moore St (Cnr Alinga St) Canberra City, (02) 6205-2222
- A.C.T. Consumer Affairs Bureau
- The A.C.T. Ombudsman, in relation to administrative processes in government agencies
- Disability, Aged & Carers Advocacy Service
- Community Legal Centres
Northern Territory
- The first Information Commissioner, whose responsibilities include information privacy, was appointed in March 2003
- Consumer & Business Affairs, including its page on Consumer Complaints, and Consumer Affairs facts Sheets
- The N.T. Ombudsman, in relation to administrative processes in government agencies
- Community Legal Centres
Additional Resources
The following sites may provide you with access to additional information or complaint-handling organisations:
- Complaint Line
- The Commonwealth Department’s Related Sites Page and Consumer Affairs Contact Pages
- NSW Department of Fair Trading’s ‘Related Sites’ Page
- Australian Banking Industry Ombudsman (ABIO) List of Consumer Help Organisations
- The WorldLII Guide on Consumer Protection in Australia
- The WorldLII Guide on Community Legal Information in Australia