Information Privacy Act 2009

The response period for a privacy complaint made to a relevant entity is—

the period of 45 business days after the day the privacy complaint is received by the relevant entity; or

if the relevant entity asks the complainant for a longer period under subsection (2)—the period during which, under subsection (4), the relevant entity may continue to consider the privacy complaint, in addition to the period mentioned in paragraph (a).

The relevant entity may, before the end of a response period under subsection (1), ask the complainant for a further specified period to consider the complaint.

A request under subsection (2) may be made more than once.

If the relevant entity makes a request under subsection (2), the relevant entity may continue to consider the complaint and respond to it until—

the complainant refuses the request; or

the relevant entity receives a notice that the complainant has made a privacy complaint to the information commission; or

the further specified period requested under subsection (2) ends.