Under section 53 of the Privacy and Personal Information Protection Act 1998 (NSW), individuals have the right to seek a review of certain conduct of the University, in circumstances where the individual believes that the University has breached the terms of the Act.

An application for internal review can be submitted by anyone who is "aggrieved" by the conduct of the University. A review can also be sought where the action taken by the University might only affect the personal information of other individuals.The request for internal review can only be made where it is alleged that the University has:

• breached any of the information protection principles; or
• breached any code made under the Privacy Act applying to the University; or
• disclosed personal information kept in a public register of the University.

An application for an internal review must:

• be in writing;
• be addressed to the University;
• specify an address in Australia to which the applicant is to be notified after the completion of the review; and
• be lodged with the University Privacy Officer within six months from the time the applicant first became aware of the conduct to be the subject of the review.

The request for internal review should be lodged with the University Privacy Officer using the Application Form for Internal Review.

The internal review shall be undertaken in accordance with the procedures set out in Part 2 of the Privacy Management Plan.