organisation you are complaining about in order to enable them to respond to your complaint. The complainant(s) The complainant is the person whose privacy has been interfered with. Name of the complainant(s) The respondent The respondent is the organisation that interfered with the complainant’s privacy. The respondent is: a Victorian Government organisation, a local council, or a contracted service provider to a Victorian Government organisation or a council. Name of respondent organisation Address (if known) Telephone number (if known) What is the respondent’s relationship to the complainant? (eg: employer, service provider, local council, law enforcement) Acknowledgement that OVIC will contact the respondent to discuss your complaint The PDP Act requires the Information Commissioner to notify the respondent of your complaint as soon as practicable we receive it. I understand that OVIC will contact the respondent organisation to discuss my complaint. I understand that OVIC may provide a copy of my complaint to the respondent organisation. Which Information Privacy Principle (IPP) has been breached? reasonable and practicable to collect the This page provides a summary of organisations’ information from me directly. obligations under the IPPS to assist you to formulate your complaint. The full text of the IPPs IPP 2 Use and disclosure — can be found in Schedule 1 to the PDP Act, or on The respondent used my personal information the OVIC website. inappropriately. IPP 1 Collection — The respondent disclosed my personal The respondent collected personal information information inappropriately. me: IPP 3 Data quality — that was not necessary for one or more of The respondent did not take reasonable steps their functions or activities. to make sure that the personal information it by unlawful or unfair means, or in an collected, used or disclosed about me was unreasonably intrusive way. accurate, complete and up to date. without providing proper notice about the IPP 4 Data Security — collection (proper notice should include The respondent did not take reasonable steps information about the purposes for which the to protect the personal information it held information is collected and who it is usually about me from misuse and loss and from disclosed to). unauthorised access, modification or from a party when it would have been disclosure.
organisation you are complaining about in order to enable them to respond to your complaint. The complainant(s) The complainant is the person whose privacy has been interfered with. Name of the complainant(s) The respondent The respondent is the organisation that interfered with the complainant’s privacy. The respondent is: a Victorian Government organisation, a local council, or a contracted service provider to a Victorian Government organisation or a council. Name of respondent organisation Address (if known) Telephone number (if known) What is the respondent’s relationship to the complainant? (eg: employer, service provider, local council, law enforcement) Acknowledgement that OVIC will contact the respondent to discuss your complaint The PDP Act requires the Information Commissioner to notify the respondent of your complaint as soon as practicable we receive it. I understand that OVIC will contact the respondent organisation to discuss my complaint. I understand that OVIC may provide a copy of my complaint to the respondent organisation. Which Information Privacy Principle (IPP) has been breached? This page provides a summary of organisations’ obligations under the IPPS to assist you to formulate your complaint. The full text of the IPPs can be found in Schedule 1 to the PDP Act, or on the OVIC website. IPP 1 — Collection The respondent collected personal information me: that was not necessary for one or more of their functions or activities. by unlawful or unfair means, or in an unreasonably intrusive way. without providing proper notice about the collection (proper notice should include information about the purposes for which the information is collected and who it is usually disclosed to). from a party when it would have been reasonable and practicable to collect the information from me directly. IPP 2 — Use and disclosure The respondent used my personal information inappropriately. The respondent disclosed my personal information inappropriately. IPP 3 — Data quality The respondent did not take reasonable steps to make sure that the personal information it collected, used or disclosed about me was accurate, complete and up to date. IPP 4 — Data Security The respondent did not take reasonable steps to protect the personal information it held about me from misuse and loss and from unauthorised access, modification or disclosure.
OVIC-Privacy-Complaint-Form.docx