I would like to take further action with respect to this misprocessing, how can I do this?

The Operational Circular no. 11 foresees the possibility to make a formal report to the Office of Data Privacy for misprocessing.