(1) An individual whose personal information is, or at any time has been, held by a relevant entity may make a privacy complaint to the information commissioner.
(2) Also, a privacy complaint may be referred to the commissioner by any of the following entities—(a) the ombudsman;(b) the health ombudsman under the Health Ombudsman Act 2013 ;(c) the human rights commissioner under the Anti-Discrimination Act 1991 ;(d) a person or other entity having responsibilities, under a law of another State or the Commonwealth that corresponds to this Act, that correspond to the responsibilities of the commissioner under this Act;(e) any other commission or external review body that has received the privacy complaint in performing its functions under a law.
(3) As soon as practicable after receiving a privacy complaint made or referred under this section, the commissioner must advise the relevant entity the subject of the complaint.