Meet the statutory duty in force from 19 June 2026 to accept, acknowledge and resolve data protection complaints.
Data protection & GDPR
Data Protection Complaints Procedure
About this document
Since 19 June 2026, section 164A of the Data Protection Act 2018 gives individuals the right to complain directly to an organisation about how it uses their personal data. Organisations must make complaining easy (including an electronic form), acknowledge complaints within 30 days and respond without undue delay. This procedure, with its public summary, complaint form, letters and register, lets you show you comply.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Data protection & GDPR
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
