How does the ICO deal with complaints?
-
This guidance explains what you need to do to meet the new requirements for you to have a data protection complaints process, as set out in the Data (Use and Access) Act. Although these requirements are not in force until 19 June 2026, we think it is useful for this to be published now so that you are ready for these changes. Even before these requirements are in force, we think that what’s set out in this guidance represents good practice.
Latest updates - 12 February 2026
12 February 2026 - this guidance was published
How does the ICO deal with complaints?
If someone tells you they’re raising a complaint with us, there’s no need for you to tell us. We’ll be in touch if we need more information from you.
In most cases, if someone complains to us about the way you’ve handled their personal information, we’ll ask them to raise a complaint with you first.
Further reading – ICO guidance
Relevant provisions in the legislation