The process is set out in the Privacy Act, not specific to us, such that if an individual has a problem with it, they can follow a certain recourse that ultimately may lead to the Federal Court, as I understand it.
On June 5th, 2008. See this statement in context.