Back

File privacy rights violation complaints in writing.


CONTROL ID
00477
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Corrective

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Implement procedures to file privacy rights violation complaints., CC ID: 00476

This Control has the following implementation support Control(s):
  • Include the acts or omissions that are in violation of privacy rights in the privacy rights violation complaint., CC ID: 14360
  • Include the individual's name who is the subject of the complaint in the privacy rights violation complaint., CC ID: 14359


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • All complaints shall be in writing. (§ 36(3), Act No. 119 of 1988 as amended, taking into account amendments up to Freedom of Information Amendment (Parliamentary Budget Office) Act 2012)
  • A class member may withdraw from a representative complaint at any time before the information commissioner begins the inquiry process into the complaint by notifying the commissioner in writing. (§ 38B(2), Act No. 119 of 1988 as amended, taking into account amendments up to Freedom of Information Amendment (Parliamentary Budget Office) Act 2012)
  • (§ 36(3), Australia Privacy Act 1988)
  • Complaints to the Privacy Commissioner must be made in writing, unless otherwise authorized by the Commissioner. (§ 30, Canada Privacy Act, P-21)
  • An individual has the right to file a written complaint with the Privacy Commissioner against an organization that violates any Division 1 provision or that is not following a Schedule 1 recommendation. (§ 11(1), Canada Personal Information Protection Electronic Documents Act (PIPEDA), 2000, c.5)
  • The notice of an appeal of a complaint must contain the appellant's name, the address to which notifications should be sent, the access unit to which the application was filed and its address, the date the Institute was notified or became aware of the cause, and a clear and concise statement of the … (Art 27, Guanajuato Personal Data Protection Law)
  • Review appeals must be made in writing or by appearing before the Commission and must include the following information: the name of the individual and/or his/her legal representative; address or email address to receive notices; the responsible public entity; what is being contested; and the facts … (Art 86, Tlaxcala Law on Access to Public Information and Personal Data Protection)
  • Enrollees may file grievances either orally or in writing. (§ 422.564(d)(1), 42 CFR Parts 412, 413, 422 et al., Medicare and Medicaid Programs; Electronic Health Record Incentive Program, Final Rule)
  • A parent or eligible student may file a written complaint with the Office regarding an alleged violation under the Act and this part. The Office's address is: Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue, SW., Washington, DC 20202. (§ 99.63 ¶ 1, 34 CFR Part 99, Family Education Rights Privacy Act (FERPA))
  • A request by a victim for transaction information in an alleged identity theft case must be made in writing and mailed to the address specified by the affected business. The request should include the date of the transaction and account or transaction numbers, if known (§ 151, Fair and Accurate Credit Transactions Act of 2003 (FACT Act))
  • A request by a victim for transaction information in an alleged identity theft case must be made in writing and mailed to the address specified by the affected business. The request should include the date of the transaction and account or transaction numbers, if known. (§ 609(e)(3), Fair Credit Reporting Act (FCRA), July 30, 2004)
  • Independent recourse mechanisms must include on their public websites information regarding the Privacy Shield Principles and the services that they provide under the Privacy Shield. This information must include: (1) information on or a link to the Privacy Shield Principles' requirements for indepe… (§ III.11.d.ii., EU-U.S. Privacy Shield Framework Principles)
  • A complaint must name the person that is the subject of the complaint and describe the acts or omissions believed to be in violation of the applicable administrative simplification provision(s). (§ 160.306(b)(2), 45 CFR Part 160 - General Administrative Requirements)
  • A complaint must be filed in writing, either on paper or electronically. (§ 160.306(b)(1), 45 CFR Part 160 - General Administrative Requirements)
  • A parent or eligible student may file a written complaint with the Office regarding an alleged violation under the Act and this part. The Office's address is: Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue, SW., Washington, DC 20202. (§ 99.63 ¶ 1, 34 CFR Part 99, Family Educational Rights and Privacy)
  • Complaints must be filed in writing and must identify the name and address of the register, data file, or bank and the name of the user or person responsible for the register, data file, or bank as accurately as possible. For public files, banks, or registers, an attempt must be made to identify the… (§ 38.1, § 38.2, § 38.3, § 38.5, Argentina Personal Data Protection Act)