In the course of handling and resolving a complaint, data breach notification, review or an investigation, we may collect personal information (including sensitive information) about you indirectly from publicly available sources or from third parties such as:</p> <ul> <li>your authorised representative, if you have one</li> <li>applicants, complainants, respondents to a complaint, investigation, application or data breach notification or the third parties’ employees and witnesses.</li> </ul> <p>We also collect personal information from publicly available sources to enable us to contact stakeholders who may be interested in our work or in participating in our consultations.</p>