The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

I ddarllen y tudalen yma yn Cymraeg, dewiswch ‘Cymraeg’ ar y dewisydd iaith isod.

We are committed to providing high standards of customer service in line with our Service Charter. We aim to keep our promises, keep our customers informed and communicate clearly. 

Calls to our helpline – 0303 123 1113 

If you call us with a general enquiry about the matters we regulate, in most cases the first person you speak to will be able to deal with it. If we need to call you back, we will aim to do this within one business day or at a time more convenient to you.

If we are already dealing with a matter you have raised and you want to discuss it, please call the number given to you by your case officer.

We also welcome calls in Welsh.

Data Protection Complaints

We want to know how organisations are doing when they are handling information rights issues. We also want to improve the way they deal with the personal information they are responsible for. Reporting your complaints to us will help us to do that.

Before reporting a complaint to us, we expect you to give the organisation the opportunity to consider it first. In order for us to look at their information rights practices we need you to provide us with their reply.
Where appropriate, we will give you advice about how we think the law applies to your issue or complaint. We aim to reach an outcome in 90% of complaints cases within six months.

If you do want to raise concerns about an organisation then we suggest that you do so within three months of receiving their final response to the issues raised. Waiting longer than that can affect the decisions that we reach. In some cases an undue delay will mean that we will not consider the matter at all.

Our role is not to investigate or adjudicate on every individual complaint. We are not an ombudsman. But we will consider whether there is an opportunity to improve the practice of the organisations we regulate and we will share our decisions with you.

It is up to us to decide whether we should take further action. Even where we decide that further action is not required at the moment, perhaps because the organisation has made a mistake but is working to put things right, we will keep concerns on file. This will help us over time to build a picture of an organisation’s information rights practices.

We may ask organisations to explain to us what they have done in response to issues or concerns raised. We will publish details of improvements and give you the opportunity to sign up to our newsletter, giving regular updates of the action we are taking.

If you are seeking personal redress or compensation for the way an organisation has dealt with your personal information, you will need to pursue this independently through the courts or with an industry's own ombudsman or regulatory body.

Registration

If you contact us to apply for, change or renew a registration under the Data Protection Act you can expect us to process your request within seven calendar days of receiving it. Your request is valid from the date it arrives in our office.

Service adjustments

We can provide information about our service in different formats and languages, and we can adapt the way we communicate with you depending on your needs - for example, by phone, live chat, large format print or textphone. Please let us know what your particular needs are and we will do our best to help. See our Reasonable Adjustment Policy for more information.

Treating our staff with dignity and respect

We are committed to providing excellent customer service to everyone who contacts us in a respectful, courteous and polite manner.

As an employer, we have a duty to safeguard the health and wellbeing of our staff. The ICO does not expect its staff to tolerate abusive, threatening, demeaning or offensive behaviour either verbally or in writing.
Similarly, we do not expect our staff to deal with someone who, because of the frequency of their contact, places a strain on time and resources and causes undue stress for staff.

Where we identify this behaviour we may restrict your contact with us in line with our Unreasonably Persistent and Unacceptable Behaviour Policy.

Feedback about our service

All feedback about our service is valuable to us. Just as we want to hear about organisations that we regulate, your feedback about how you have been treated by the ICO helps us understand what we are doing well, need to put right or improve.

Complaints about the ICO

If you think we should have done something differently in how we have handled your concerns, or how we have treated you, you can complain.

If you make your complaint by telephone we will do our best to deal with it. However, it may be necessary to ask you to put your complaint in writing so we can consider it clearly.

If you do want to make a complaint then you should do so within three months of receiving our service. Waiting longer than that can affect our ability to look into the complaint that you raise. In some cases an undue delay will mean that we will not consider the matter at all. We will acknowledge your complaint within 14 calendar days. See our Service Complaints Policy for more information.

The Information Commissioner will not respond to your service complaint personally, even if you write directly to her. She has delegated responsibility for reviewing our service in specific cases to managers.

In most cases, the person who dealt with you will first check to see if they can resolve your complaint by providing you with some further information or clarification about any decisions they have reached. If they can't do that, they will share your complaint with an appropriate reviewing officer, who will look at what we have done and why.

Once a reviewing officer has considered your complaint they will tell you what they have decided. The officer should reply within 30 calendar days of the complaint being raised with them.

We will also share general information about the complaints we receive on our website. We will include what most complaints are about and where appropriate, how we have used those complaints to improve our service.

Complaining to the Ombudsman

If, after we have considered your complaint, you remain dissatisfied with our service, or you think we have not acted properly or fairly, you can take the matter to the Parliamentary and Health Service Ombudsman.

Complaints to the Ombudsman must be made through an MP. For further information about the Ombudsman please visit its website (www.ombudsman.org.uk) or call its Helpline on 0845 015 4033.

If your complaint is about the way we have interpreted the law then the Ombudsman cannot help you. If you want to challenge our interpretation of the law, you should consider seeking legal advice.

Disagreeing with freedom of information decisions

If you disagree with a decision notice we have issued about your Freedom of Information Act complaint, the law does not allow us to review our decision. Instead, you can appeal to the First–tier Tribunal (Information Rights).

First-tier Tribunal (Information Rights)
GRC & GRP Tribunals,
PO Box 9300,
Leicester,
LE1 8DJ

Tel: 0203 936 8963

Email: grc@justice.gov.uk

Website: http://www.justice.gov.uk/tribunals/general-regulatory-chamber

Unless special circumstances apply a notice of appeal must be served on the Tribunal within 28 days of the date on which decision notice was served on or given to you.

Please note that the Tribunal does not consider complaints about decisions we have made under the Data Protection Act or the Privacy and Electronic Communications Regulations.

Freedom of Information Act requests to the ICO

If you made a request to the ICO under the Freedom of Information Act for information we may hold, and you would like us to review our response, please see our internal review policy.