COMPLAINT:

Any person who is being subjected to personal data breach has the right to file a complaint before
commission as described under this Act. The following actions were taken by data controller and
processor to address the complaint:
a. a breach of data subject’s consent to process data
b. a breach of obligations of the data controller or the data processor in performance of 30
their functions under this Act.
c. provision of incomplete, misleading, or false information while taking consent of the
data subject.
d. any other matter relating to protection of personal data.
 Before submitting his complaint, the alleged victim or complainant must certify the commission
that he has not yet filled any application or suit in any other court. The complaint may be
submitted on plain paper, or a simplified format passed by Commission.
 The commission must provide an online receipt to the alleged victim along with a reasonable fee
for processing data subjects complaint as specified in this act.
 The commission shall handle the complaint with in three working days. Notify the complainant
of resolving of his complaint within thirty days of his receipt.
 After receiving the complaint, the Commission may request an explanation form data processor
and controller regarding the subject of complaint by appropriate communication and providing
him with adequate time and opportunity.
 The commission must stop the directives that breach the personal data rights of the data
subject. They must use electronic communication to resolve complaints and maintain its record.
The Commission must set up an online facility to receive, handle, manage, and resolve
complaints effectively and efficiently.
 If the data processor and controller fails to resolve then the Commission may begin court action
as described under this Act.