Source: Privacy Commissioner
When your organisation receives a privacy complaint from someone you need to act quickly and decisively. Individuals need to try and work with
organisations first to resolve their complaint before they can complain to the Privacy Commissioner, so its important that you have a process to deal with complaints.
Read more detailed guidance on handling privacy complaints in our Poupou Matatapo guidance. Step one: acknowledge the complaint
Your organisation should do this as quickly as possible. Outline your understanding of the issue and say who at your organisation will be looking into the complaint (who is your privacy officer). Provide clear, reasonable timeframes and provide regular updates on progress if you cant meet the timeframes. Its always better to under promise and over deliver. Step two: listen to complainant
Understand the complainants main concerns so that you can address the right issue.
