You can complain to the ICO about the way an organisation has handled personal information.
In most cases, before you complain to us you need to have:
- complained directly to the organisation;
- asked for clarification from the organisation if you have had a response you don’t understand; and
- followed up with the organisation if you have not received a response after 30 days.
If you have followed all these steps or have not received a response from the organisation, you can submit your complaint. You should do this within three months of your last contact with the organisation.