The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Individual complaints

Your organisation has procedures to recognise and respond to individuals' complaints about data protection, and individuals are made aware of their right to complain, eg through a complaints page on your website.

Ways to meet our expectations:

  • You have procedures to handle data protection complaints raised by individuals and you report their resolution to senior management.
  • The DPO’s contact details or alternative contact points are publicly available if individuals wish to raise a complaint about the use of their data.
  • You tell individuals about their right to make a complaint to the ICO in your privacy information.

Can you answer yes to the following questions?

  • Would complainants say that they were clear about how to make complaints and how it would be handled?