Maurice Blackburn (law firm)

Representative complaints update

Retrieved on: 
Tuesday, January 2, 2024

Published: 13 December 2023

Key Points: 


Published: 13 December 2023
The OAIC has received multiple representative complaints following the major data breaches.
As at the date of publication, the Australian Information Commissioner (
AIC) has accepted two representative complaints; one against Medibank Private Limited in respect of its October 2022 data breach, the other against Singtel Optus Pty Limited in respect of its September 2022 data breach.

What is a representative complaint?

  • To make a valid representative complaint the requirements of sections 36 and 38 of the Privacy Act must be met.
  • This means that information gathered in the Medibank Commissioner-initiated investigation will be used for the purposes of the Medibank representative complaint.
  • Similarly, information gathered in the Optus CII will be used for the purposes of the Optus representative complaint.

Current court proceedings in respect of the representative complaints