Your organisation has procedures to recognise and respond to individuals' complaints about information privacy & protection, and individuals are made aware of their right to complain.
Best Practice
You have procedures to manage information privacy & protection complaints or grievances raised by individuals and you have included clear details of senior management involvement in the process.
The Privacy Officer's contact details or alternative contact points are publicly available if individuals wish to raise a complaint about the use of their personal information.
You tell individuals about their right to request a review or make a complaint to PrivCom in your privacy policies.
Accountability Check
Would complainants state that they were clear about how to make complaints with your organisation, and how they would be handled?