Substantiated complaint: Written statement by a regulatory or similar official body addressed to the reporting organization that identifies breaches of customer privacy; or a complaint lodged with the organization that has been recognized as legitimate by the organization.