Prepare a privacy complaint before contacting a lawyer

01 / Practical step

Describe the event without assuming the legal conclusion

Write a factual account of what you observed: the message received, information shown, recipient or account affected. Separate direct evidence from what another person told you. Record when you discovered the issue and any action already taken. Use neutral wording such as “this attachment was sent to this address” rather than relying only on labels such as unlawful disclosure. The adviser can assess which obligations and remedies may apply.

02 / Practical step

Map the organisations involved

List the organisation you dealt with and any other entity named in correspondence. A workplace, government body and private business may raise different coverage questions. Ask which privacy regime or complaint body is relevant; do not assume one national route covers every situation. If a financial service is involved, tell the adviser about any existing financial complaint so the two issues can be considered together.

03 / Practical step

Preserve a small evidence index

Keep original messages, request confirmations, screenshots showing dates and the organisation’s response. Record where the original is stored and what each item demonstrates. Do not alter the underlying record to make it clearer; use a separate note to explain it. Ask how to provide particularly sensitive records and whether extracts are sufficient for the first meeting. Avoid reproducing another person’s details unnecessarily.

• The organisation and contact used
• A dated account of the event or request
• Copies of complaints and responses
• The practical outcome you are seeking

04 / Practical step

Check the official complaint guidance

The OAIC publishes steps to consider before lodging a privacy complaint and explains that another dispute-resolution body may be relevant. Read the current guidance for your circumstances, including what to do with the organisation first. Ask for help if coverage or the appropriate route is unclear. A directory enquiry is not a complaint submission, and an acknowledgement from a firm does not mean it is managing any deadline.

05 / Practical step

Illustrative example: the repeated wrong address

A customer has asked an organisation to correct an address, but a later statement still shows the old one. The customer brings the correction request, acknowledgement and later statement to a consultation, and asks what a further complaint should address. The invented example is about assembling a traceable record. It does not establish that compensation is available or that the national privacy law applies to that organisation.

06 / Practical step

Compare advice with complaint preparation

A short advice appointment may help identify the route, while drafting and handling a complaint is a separate scope. Ask what written output you will receive, who communicates with the organisation and how additional requests are charged. Identify the outcome you want discussed—such as correction, access or an explanation—without treating it as a promised result. Agree which developments need to be reported back to the lawyer.