Next steps
-
This guidance explains what you need to do to meet the new requirements for you to have a data protection complaints process, as set out in the Data (Use and Access) Act. Although these requirements are not in force until 19 June 2026, we think it is useful for this to be published now so that you are ready for these changes. Even before these requirements are in force, we think that what’s set out in this guidance represents good practice.
We would like to thank respondents for engaging with our consultation. The responses we received informed the development of our guidance. We plan to keep this guidance under review, consider how to monitor its effectiveness as per our ex-post impact framework and update it where appropriate.