Privacy Complaints

How can you complain?

The below flowchart sets out how privacy complaints work in Victoria. Click through the boxes to read more about each step of the process.

Step 1

Complain to the organisation

This section explains that you should complain to the organisation first and outlines how to do so.

This is often the quickest and easiest way to resolve complaints.

Step 2

Making a complaint to OVIC

This section explains whether we can handle your complaint and how you can make a complaint to OVIC.

You will also find our complaint form here.

Step 3

How OVIC handles privacy complaints

This section explains our privacy complaint process and what happens after you submit your complaint to us.

Step 4

After OVIC - litigating at VCAT

This section explains your remaining option if OVIC cannot resolve your complaint.

It sets out how VCAT works and handles privacy cases.

What can you make a complaint about?

You can make a complaint under the Privacy and Data Protection Act 2014 (Vic) (PDP Act) if you think a Victorian public sector organisation has interfered with your privacy.

What is an interference with privacy?

An interference with privacy is when an organisation handles your personal information in a way that is not allowed by the 10 Information Privacy Principles (IPPs). For example, this might involve an organisation collecting too much information about you; sending your information to someone it shouldn’t have; or losing your information.

You can find out more about what you can complain about on our website by visiting Your Privacy Rights.