Privacy complaint OAIC preparation checklist
An OAIC complaint is the primary external mechanism for privacy breaches affecting Australian individuals. This checklist helps lawyers and privacy officers prepare a complaint that survives preliminary assessment.
This is a 12-step checklist for preparing a privacy complaint to the Office of the Australian Information Commissioner under the Privacy Act 1988 (Cth). It covers the APP framework, internal complaint, and remedies.
The checklist
Identify the respondent
Identify the APP entity or agency the complaint is against.
Confirm APP application
Confirm the respondent is covered by the Australian Privacy Principles.
Identify the conduct
Identify the act or practice complained of and when it occurred.
Map the APPs
Map the conduct to specific APPs — collection, use, disclosure, quality, access.
Complete internal complaint
Confirm the complaint was made to the respondent and 30 days have passed.
Gather evidence
Gather correspondence, privacy policies, and records relating to the conduct.
Identify loss and harm
Identify financial loss, psychological harm, humiliation, or loss of privacy.
Scope remedies
Scope remedies including apology, correction, change of practice, and compensation.
Check NDB overlap
Assess whether the conduct involves a Notifiable Data Breach.
Draft complaint form
Draft the OAIC complaint form with clear chronology and APP analysis.
Prepare for conciliation
Prepare for conciliation including realistic settlement parameters.
Consider determination path
Consider the determination pathway if conciliation does not resolve the complaint.
When this checklist applies
Use when preparing or advising on an OAIC privacy complaint after an internal complaint has been exhausted.
Common pitfalls
- Complaint filed before the 30-day internal period
- APP analysis missing or too general
- Remedies sought without evidence of harm
- Missing NDB angle when a data breach is involved
- Expected settlement range not scoped before conciliation
Run this checklist on a real matter
Quillio can map conduct to the APPs, summarise OAIC determinations, and draft complaint narratives. See /practice-areas/regulatory or start a free trial.
General Commonwealth privacy guidance. State-based privacy regimes and sector-specific rules may apply alongside.
Use this checklist on your matter.
Quillio can run this checklist on a specific NSW conveyancing matter — confirm each item, calculate adjustments, and generate the supporting documents. The free trial requires no credit card.
Start your free trial