- Home
- Individuals
- e-Services
- Report a Data Protection Concern
- Organisation’s Use of Personal Data
What is Your Data Protection Concern?
Choose whether the organisation involved is a government agency or a private organisation to view the appropriate process.
Select an Organisation Type:
2 Ways to Raise Your Concern
envelope
Method 1: Contact the Agency’s Quality Service Manager (QSM)
headphones
Method 2: Report to the Government Data Incident Reporting Platform
Frequently Asked Questions
What should I do if I am unsure if an incident constitutes a government data incident?
Expand section
What is the Public Sector (Governance) Act (PSGA)?
Expand section
What is a Quality Service Manager (QSM)?
Expand section
Yes
Allowed without Consent
- Yes
- Yes
- Yes
No
Not Allowed, Even With Consent
- No
- No
- No
- No
When to Report to PDPC?
Not every data protection concern is handled by PDPC. Understanding what falls within its scope helps ensure your concern reaches the right place.
Yes
PDPC Handles
- Yes
- Yes
- Yes
- Yes
No
PDPC Does Not Handle
- No
- No
- No
- No
- No
4 Steps to Raise Your Data Protection Concern
- envelopeSTEP 1
Contact the Organisation First
- hourglassSTEP 2
Wait for a Response
- writeSTEP 3
Escalate to PDPC
- replySTEP 4
What Happens After You Report?