As aforementioned, the prevailing laws have not designated Data Protection Authority. Nonetheless, the Privacy Act and Criminal Code provide a complaint mechanism.

Complaint of the offence under the Privacy Act is processed either by filling a complaint at the concerned district court by the concerned person or filling a FIR at the relevant police office. As regards the latter, the concerned police office through the government office would file a charge sheet in the concerned district court. Such procedure of directly filing a complaint at the concerned district court or police office is determined based on the nature of the offence. In relation to an offence under the Criminal Code, the FIR process as aforementioned is adopted.

See Collection and processing and Online privacy for details of fines for specific violations.