The Office of the Australian Information Commissioner (OAIC) can investigate complaints against Commonwealth government agencies and certain private organisations that relate to privacy or the use or misuse of personal information.
Complaints should be raised with the agency or organisation concerned before the OAIC is contacted.
For more information, see the Law Handbook pages on the Office of the Australian Information Commissioner and Consumer Data - Breaches and Rights.