New rules on data protection complaints are introduced by the Data (Use and Access) Act 2025, from 19 June 2026. Organisations should ensure that their processes and documentation are compliant, including informing data subjects of their right to complain, facilitating complaints, and responding without undue delay.
New rules on data protection complaints are introduced by the Data (Use and Access) Act 2025, from 19 June 2026. When an employer responds to a data subject access request, it is required to inform the employee of their right to complain to the employer. Employers must have procedures in place for responding to complaints.
From 19 June 2026, the Data (Use and Access) Act 2025 requires employers to have a process in place for handling data protection complaints. The systems in place for this should be included in any HR personal data audit.