Your organisation has procedures to recognise and respond to individuals' complaints about data protection, and individuals are made aware of their right to complain, eg through a complaints page on your website.
Ways to meet our expectations:
- You have procedures to handle data protection complaints raised by individuals and you report their resolution to senior management.
- The DPO’s contact details or alternative contact points are publicly available if individuals wish to raise a complaint about the use of their data.
- You tell individuals about their right to make a complaint to the ICO in your privacy information.
Can you answer yes to the following questions?
- Would complainants say that they were clear about how to make complaints and how it would be handled?