Automatic language translation
Our website uses an automatic service to translate our content into different languages. These translations should be used as a guide only. See our Accessibility page for further information.
Any person who is aggrieved by the conduct of the Department in handling personal and/or health information may lodge a privacy complaint.
The Department encourages individuals to resolve the issue directly with the relevant business unit.
If an individual remains dissatisfied, they can lodge a privacy complaint by applying for an ‘internal review’ of the conduct of the Department they believe breaches an IPP and/or a HPP.
An application for internal review should:
An individual who is applying for a privacy internal review may wish to use the Department’s Application Form – Internal Review of Conduct.
The internal review is conducted by a person who:
The Internal Review follows the process set out in the Information & Privacy Commission’s internal review checklist. When the internal review is completed, an applicant is notified in writing of:
The Department will keep the Privacy Commissioner informed of the progress of the internal review and will provide a copy of the finalised internal review report. Further information about the internal review process is available on the IPC website.
An applicant must lodge their request for internal review within six months from the time they first became aware of the conduct that they believe breached their privacy. The Department acknowledges receipt of an internal review and will aim to complete the internal review within 60 calendar days. The Department will contact an applicant if the review is likely to take longer than 60 days to complete.
The Department will contact an applicant in writing within 14 calendar days of completing the internal review. If the internal review is not completed within 60 days, or if an applicant is unhappy with the outcome of the internal review, they have a right to seek a review of the conduct by the NCAT.
An applicant has 28 calendar days from the date of the internal review decision to seek an external review. To request an external review, an applicant must apply directly to the NCAT. To apply for an external review or to obtain more information about seeking an external review, including current forms and fees, please contact the NCAT:
The Department welcomes the opportunity to discuss any privacy issues an individual may have. Individuals are encouraged to try to resolve privacy issues with the relevant division or business unit within the Department informally before lodging an internal review.
Complaints to the Privacy Commissioner - Individuals have the option of complaining directly to the Privacy Commissioner if they believe that the Department has breached their privacy. The Privacy Commissioner’s contact details are:
23 Oct 2023