(1) A data scheme entity may complain to the Commissioner if the complainant reasonably suspects that another entity, while the other entity was a data scheme entity, breached:
(a) this Act; or
(b) a data sharing agreement to which both entities were party when the alleged breach occurred.
(2) An entity that ceased to be a data scheme entity no more than 12 months earlier may also complain to the Commissioner if the complainant has the reasonable suspicion mentioned in subsection (1).
(3) A complaint must:
(a) specify the respondent (see section 89); and
(b) be made in an approved form (if any); and
(c) meet any requirements prescribed by a data code.