You can submit a complaint against any organisation that you entrusted your personal information,which had been breached or compromised. This includes commercial companies, hospitals, government departments, schools, banks, etc.