Before making a complaint to the Data Protection Commission (DPC), it is recommended that you contact the data controller and set out your data protection concerns in writing. It is also recommended that you request a written response from the data controller; the reason being, it is the experience of the DPC, that matters can be often addressed between the individual and the data controller when the matter is initially raised with them, which means you may not need the assistance of the DPC at all.

Data controllers tend to have privacy policies on their website and you may be able to find the contact details there of a Data Protection Officer (DPO) if there is one appointed. If there is no DPO in the organisations (and not all organisations are obliged to appoint a DPO), it is expected that the privacy policy will contain an email address where such data protection queries or concerns can be directed.

If you remain dissatisfied with the responses of the data controller and the matter has not resolved, you may at that stage, wish to contact the DPC.