Division 31

The Privacy Commissioner may initiate a complaint if the Commissioner is ‘satisfied that there are reasonable grounds to investigate a matter under [the Privacy] Act’ and has broad powers of investigation in respect of any complaint. Additionally, the Privacy Commissioner may address complaints referred to it by the Data Protection Authorities (DPAs) of any of the Member States of the European Union (EU) on behalf of an EU resident, to the extent such resident has authorized the DPA to act on his or her behalf and believes that his or her data protection complaint regarding API and PNR information has not been satisfactorily dealt with by CBSA as set out in paragraph 30 above. The Privacy Commissioner will report its conclusions and advise the DPA or DPAs concerned regarding actions taken, if any.