If you've had a problem accessing your personal information, or have a concern about the way an organisation is handling your personal information – perhaps they hold information about you that is incorrect, they have held it for too long, or they are not keeping it secure – we may be able to help you do something about it.
What can I expect?
If we think the organisation has not complied with its obligations we can give the organisation advice and ask it to solve the problem. Our main aim is to improve the information rights practices of organisations, where there is an opportunity for us to do so.
We will not usually investigate concerns where there has been an undue delay in bringing it to our attention. You should raise your concerns with us within three months of your last meaningful contact with the organisation concerned.