Data protection complaints

Copyright © 2026 LexisNexis

There is no obligation for organisations to deal with data protection complaints and the right of complaint under the UK GDPR is to the Information Commissioner’s Office (ICO). However, the Data (Use and Access) Act 2025 will impose complaint-handling obligations on commercial organisations. In the meantime, guidance and tools published by the ICO make it clear that the ICO will not usually deal with a data protection complaint unless it has first been raised with the organisation to which the complaint relates.

The right to complain

Data subjects have the right to lodge a complaint with the ICO, where they consider their personal data has been processed in a way that breaches the UK GDPR. They can also complain to the ICO via a not-for-profit body, organisation or association. The ICO is required to investigate complaints to the extent appropriate and inform the complainant of the progress and outcome of the investigation within a reasonable period.

There is no corresponding right to make a complaint to the data controller, ie to your organisation. Any complaints process you introduce is therefore voluntary. However, The Data (Use and Access) Act 2025

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Existing user? Sign-in TAKE A FREE TRIAL
Powered by Lexis+®
Latest Practice Compliance News

Practice Compliance weekly highlights—5 February 2026

This week's edition of Practice Compliance weekly highlights includes sanctions against Iranian authorities for human rights violations, a warning notice from the SRA on 'no win, no fee' arrangements in high-volume consumer claims and the Data (Use and Access) Act 2025 (DUAA 2025) (Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82, which bring the majority of the DUAA 2025’s data protection reforms into force from 5 February 2026.

FCDO imposes sanctions on six individuals fuelling Sudan conflict

The Foreign, Commonwealth and Development Office (FCDO) has imposed immediate sanctions on six individuals on 5 February 2026. The measures were announced by the Foreign Secretary, Yvette Cooper, following her visit to the Sudan–Chad border. The sanctions target senior commanders of the Rapid Support Forces and the Sudanese Armed Forces, as well as individuals accused of financing the conflict, procuring weapons and recruiting foreign mercenaries, in response to their alleged roles in fuelling the war in Sudan and enabling serious abuses against civilians. The FCDO stated that the measures aim to increase pressure on those responsible for massacres, sexual violence, forced displacement and other atrocities, particularly in Darfur and Gezira states, and to disrupt the financial and logistical networks sustaining the conflict. The sanctions form part of a wider UK strategy combining enforcement, humanitarian assistance and diplomacy. Under this approach, the UK has committed £146m in aid during the current financial year, is calling for an immediate ceasefire and unhindered humanitarian access, and will prioritise Sudan during its February 2026 presidency of the UN Security Council while co-hosting an international conference in April 2026 to strengthen coordinated international efforts to end the conflict and promote accountability.

OFSI amends General Licence INT/2022/1947936 and UK Financial Sanctions FAQs

The Office of Financial Sanctions Implementation (OFSI) has updated its UK Financial Sanctions frequently asked questions (FAQs), amending FAQs 147 and 148. The OFSI has also amended General Licence INT/2022/1947936 and removed expired General Licence INT/2025/8202932.

FCDO announces UK sanctions against Iranian authorities for human rights violations during peaceful protests

The Foreign, Commonwealth & Development Office (FCDO) has announced the UK’s package of sanctions against ten individuals and one organisation in Iran for enabling and facilitating recent human rights violations against peaceful protestors. These measures form part of the UK’s commitment to hold the Iranian authorities to account following widespread brutality and violence. The Law Enforcement Forces of the Islamic Republic of Iran (FARAJA) was sanctioned for its prominent role in policing protests in Iran and is subject to an immediate director disqualification and asset freeze, while the designated individuals—including the Minister of the Interior, several Police Chiefs, Islamic Revolutionary Guard Corps (IRGC) commanders, judges and an Iranian businessman—are subject to immediate asset freezes, travel bans and director disqualifications. The measures follow earlier commitments by the Prime Minister and the Foreign Secretary, recent human rights sanctions by the EU and US, and international condemnation by the G7 and EU High Representative, forming part of more than 550 existing UK sanctions against Iranian individuals and entities for human rights violations.

View Practice Compliance by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of
Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

Late payment penalties—inheritance tax

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of