Policy Timeframes and process for dealing with Privacy Complaints

Timeframes and process for dealing with Privacy Complaints


Print Friendly and PDFPrint Friendly

Process

Timeline

Responsibility

If individuals believe that their personal information has not been dealt with in accordance with the Information Privacy Act 2009, they may make a complaint to the Privacy Decision-Maker at the University. The complaint must be made in writing. Complaints should be forwarded to:

Privacy Decision-Maker

Secretariat

James Cook University

Townsville QLD 4811

Or secretariat@jcu.edu.au

(See Note 1 below.)

Up to twelve months from the date when the breach was suspected to have occurred.

Complainant

Complaints will be acknowledged in writing.

Within 10 business days from the date on which the complaint was received.

Privacy Decision-Maker

The complaint will be processed and the complainant will be advised in writing of the decision.

Within 45 business days from the date on which the complaint was received.

Privacy Decision-Maker

If applicants are not satisfied with the decision they may apply in writing to the Privacy Decision-Maker for internal review of the initial decision.

Within 20 business days of the complainant receiving the initial complaint decision.

Complainant

The internal review will be carried out and the complainant will be advised in writing of the review decision.

Within 20 business days of the date of receipt of application for internal review.

Internal Review Officer

Note 1:  The Information Commissioner's Office requires that any complaints first be lodged with the University, and that the Information Commissioner will not hear complaints after twelve months has lapsed from the date of alleged breach of privacy.