Next steps

We will implement the revised framework to improve the way we handle data protection complaints and to focus our resources on cases where we can have the biggest impact.

The first phase will focus on embedding the new triage approach. Further changes, such as new ways of using the information from complaints to help inform our wider regulatory work, are due to take place in the coming months.

As we move forward, we’ll continue to review and refine our approach, drawing on feedback from complainants, organisations and our own casework. The scale of harm and supporting guidance will be kept under regular review to ensure they remain clear, relevant and effective.

Our ambition is to deliver better outcomes for the public more quickly and to raise data protection standards among organisations. Organisations will also benefit from reduced routine engagement on lower-risk cases, enabling them to focus on the most significant concerns. Our goal is not just to manage demand but to raise standards around customer experience and regulatory effectiveness. By introducing this approach, we aim to provide a more responsive and impactful regulatory service.

The new framework will play a central role in how we assess and prioritise complaints, ensuring that we focus our resources to better support people who have experienced harm. By strengthening our processes, we aim to promote fairness, transparency and accountability in data protection complaint handling.

We will publish additional guidance and resources on our website as they become available.