Section 37 of the Ordinance states that an individual may make a complaint to the Commissioner about an act or practice that relates to the personal data of which the individual is the data subject and that act or practice done by a data user specified in the complaint may be a contravention of a requirement under the Ordinance. Should you find your privacy rights relating to personal data are being abused or any possible breach of the Ordinance on the part of a particular data user on the handling of your personal data, you may consider lodging a complaint with the PCPD with supporting evidences. For more details, please see Complaint Handling Policy and Complaint Handling Flow Chart.
The time limit for lodging a complaint is two years from the date of your actual knowledge of the privacy-intrusive act or practice, but it is recommended that you lodge the complaint as soon as possible.