Your privacy request or complaint

What we can do, and what we'll need from you

You can ask what personal information we hold, correct or delete it, or complain about how we have handled it. We act on every request under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

01 What you can ask for

Access to the information we hold about you, a correction to anything inaccurate or out of date, deletion where the law allows, or a complaint about our handling of your personal information.

02 What to include

Enough for us to find you in our records and understand what you are asking for. A short description is fine; you do not need legal wording.

03 Verifying who you are

Privacy law may require us to confirm your identity before we release or change anything. We will only ask for what is strictly necessary to do that.

Lodge your request

One form for access, correction, deletion and complaints. Pick a type and tell us what you need.

Choose a request type

Access request. Tell us roughly what records you are after and the period they relate to, so we can find the right material.

How we handle your request.

The same path for every request, so you always know where things stand, who has it, and when to expect a substantive reply.

  1. Acknowledge
    Confirmation within two business days.
  2. Verify
    We confirm who you are, where required.
  3. Respond
    We action it and explain the outcome.
  4. Resolve
    Matter closed, or next steps explained.

Timing you can rely on

We acknowledge every request within two business days and respond substantively within thirty. If a matter is complex, we tell you why and give a realistic timeframe, rather than leaving you guessing.

If you're not satisfied

You can ask us to review the outcome, or take the matter to the Office of the Australian Information Commissioner, which can investigate privacy complaints. You'll find its process at oaic.gov.au.