After being in a car accident and being injured. Allianz needed to get me to sign a freedom of information (FOI) form, so they could get my medical records from the Royal Adelaide Hospital (RAH). After signing it, we waited a long time to receive them. Allianz phoned the RAH to see where my medical records were. They said they had been sent ages ago. So they contacted the Australia Post to see where they were as they were being delivered by registered post. Only to find that they had been delivered to the wrong place and wrong person. But they still don't know where that is. The delivery driver does not recall that particular parcel. So someone has 168 pages of my personal information. I'm not happy at all. Then for Australia Post to send an apology to Allianz for the inconvenience it has caused them. Is that an admittance of their stuff up? Also the RAH apparently addressed it to the wrong person. My question is: What can I do about this privacy or data breach and how do I go about it?