Form · Privacy, Data Protection & Cyber
OAIC privacy complaint authorised representative form
Link to the OAIC form that authorises a representative, including a lawyer, to act on a privacy complaint. The lodge page publishes a Word file and a PDF.
- Kind
- Form. A form to complete, or a guide to completing an official one.
- Where it applies
- Commonwealth
- AI use
- Yellow You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at
- 22 October 2026
- Status
- Maintained. Checked on 22 October 2026 against the official form at oaic.gov.au and the authority it cites, for Commonwealth.
- Version
- 1
- Source
- Link to the official form. Licence: © Office of the Australian Information Commissioner. Link only: download the current form from the official page each time; do not copy or adapt it.
Where this comes from
The official form is published by oaic.gov.au; this page is a completion guide. Last checked on 2026-10-22.
When to use it
Use when a lawyer or another person is to act on an OAIC privacy complaint. Lodge it with the complaint. The complaint itself is a separate form.
Used for these tasks
- Draft a response pack for a privacy-regulator investigation
- Build a privacy-tort and misuse-of-information issues table
Each task page says how far AI may help with the task and what the lawyer must review.
How AI may be used
Yellow. A tool may compare a working note with the current official form and list what is missing. The lawyer downloads the form, completes it and lodges it.
AI may
- List the facts and documents the official page says to have ready.
- Compare a working checklist with the current downloaded form and mark gaps.
- Prepare a filing note that quotes only what the official page says.
AI must not
- Do not copy the official form into a new document or file a retyped version.
- Do not invent a form number, fee, time limit or rule that is not on the official page.
- Do not draft, settle or sign an affidavit, statutory declaration or other sworn evidence.
- Do not lodge the form or tell the client it has been filed.
The lawyer checks
- The page says a representative, including a lawyer, can be nominated, and that this form is submitted with the complaint.
- The page links a Word file named version 3 and a PDF named version 2. Download the current file. Do not assume those version numbers still match.
- Acting for someone else needs their consent and written authority, and no limitation such as a court order.
- The form files were not opened. Do not invent the fields.
Method: how the Green, Yellow and Red levels are decided. This is guidance for planning, not legal advice.
Official form
Open the official form. Always use the current version from the issuer. Licence: © Office of the Australian Information Commissioner. Link only: download the current form from the official page each time; do not copy or adapt it..
Read the full text
The full text is available after you log in. It is free. When you log in you can:
- read the whole precedent, with its drafting notes beside it;
- copy it, or download it as a Word file or Markdown;
- add it to your firm’s knowledge base, so colleagues can find it;
- let the AI tools you connect read it from that knowledge base.
The summary, the law it rests on and the AI-use guidance above stay public. Privacy.
More in Privacy, Data Protection & Cyber
- Response to a request for access to personal information (APP 12), with refusal notice and correction options (APP 13)
- Cross-border disclosure of personal information under APP 8
- Data breach response plan (Notifiable Data Breaches scheme, with cyber reporting clocks)
- Response to a direct marketing opt-out or source request (APP 7.6 and 7.7)
- OAIC privacy complaint form
- CCPA privacy policy
- Incident response plan outline
- Use or disclosure of personal information under APP 6
- Notification of an eligible data breach to affected individuals (Privacy Act s 26WL), with the public-notice option
- Notifiable data breach statement to the OAIC: completion guide for the online form
- Does the Privacy Act apply? Small business exemption assessment checklist and advice note (Privacy Act ss 6C to 6EA)
- Breach notice with a statute checklist
- Notice at collection
- Security and destruction of personal information under APP 11
- Employee records exemption: assessment checklist for a planned use of staff information (Privacy Act s 7B(3))
- APP privacy policy with AI and automated-decision disclosures (APP 1.4 and APP 1.7 to 1.9)
- Letter of demand for a serious invasion of privacy (statutory tort, Privacy Act Sch 2): take-down, undertakings and remedies
- Consumer request response
- Service-provider safeguards addendum
- Collection notice (APP 5) for forms, websites, apps and call scripts
- De-identification assessment record before a dataset is shared or released (Privacy Act s 6 definitions)
- Critical infrastructure cyber incident reporting clocks
- Serious invasion of privacy (statutory tort, Privacy Act Sch 2): claim assessment checklist
- California security breach notice
- Data protection clause for service providers, including AI vendors (no training, retention, offshore disclosure)
- AI and automated decisions clause for privacy policies and collection notices
- Privacy impact assessment checklist for an AI tool (supplement to the OAIC PIA tool)
All precedents for Privacy, Data Protection & Cyber · Tasks and AI use in this area