Investigate and take action on all privacy complaints

  • Establish and administrate a process for receiving, documenting, tracking, investigating, and taking action on all privacy complaints
  • Review, investigate and document every complaint received and shall monitor for any trends arising;
  • Acknowledge and respond to all complaints, questions or feedback received within a reasonable number of days, as defined by this procedure;
  • Take appropriate measures to respond to complaints and feedback, which may include changing privacy policies and practices;
  • Provide a means for personnel to share privacy-related concerns in confidence and ensure that reporting personnel suffer no reprisals.

Source :