Summary of responses to our consultation on draft complaints guidance for organisations
-
This guidance explains what you need to do to meet the new requirements for you to have a data protection complaints process, as set out in the Data (Use and Access) Act. Although these requirements are not in force until 19 June 2026, we think it is useful for this to be published now so that you are ready for these changes. Even before these requirements are in force, we think that what’s set out in this guidance represents good practice.
Introduction
In August 2025 we launched a public consultation seeking views on our draft complaints guidance for organisations.
It aimed to guide organisations through the new requirements of the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 (DUAA). It informs organisations of what they must, should and could do to comply, and includes advice for each stage in the process.
This page summarises the key themes emerging from the consultation responses.