What can I do if the organisation does not respond to my request or if I am dissatisfied with the outcome of my PIPA rights request?
You can resolve many problems by directly communicating with the organisation.
Step 1. Send your concerns to the organisation
If you are concerned about how an organisation is using your personal information, you can write to them.
If you are unhappy with how the organisation has handled your request, you should:
• express to the organisation that you are not satisfied;
and
• ask them in writing to respond.
When raising a concern, the organisation may or may not provide forms or tools that can assist you.
If you have already received a response but are unhappy with it, you should first send your concerns to the organisation. You must do so in writing.
The added value of having everything in writing is that it will allow you to explain your concern, give evidence and state your desired solution. It will also provide clear proof of your actions if you decide to challenge the organisation’s initial response.
If you think personal information is missing from their response, you should clearly list what other information you think they hold and would like access to. This may help the organisation review their records.
Remember to always keep copies of any correspondence about your request or concern.
When writing to the organisation, you may choose to use the master template provided on pp. 18-19. PrivCom recommends that you adjust the master template to include the details of your concern. The use of the master template is intended to serve as guidance when formally communicating with the organisation.