A complaint could be made to the Privacy Commissioner, though, if there was a disclosure that was made possibly against...if personal information was disclosed contrary to the Privacy Act. So the commissioner could always investigate such a complaint.
On February 15th, 2011. See this statement in context.