Data protection complaints

Copyright © 2026 LexisNexis

From 19 June 2026, data subjects have the right to make a complaint to your organisation, where they consider their personal data has been processed in a way that breaches the UK GDPR.

You must acknowledge the complaint within 30 days and then, without undue delay:

  1. •

    take appropriate steps to deal with the complaint, and

  2. •

    inform the complainant of the outcome

Data subjects can also lodge a complaint with the ICO and can complain to the ICO via a not-for-profit body, organisation or association. In most cases, if a data subject complains to the ICO, they will be asked to raise the complaint you first.

Complaint or exercise of data subject right?

You should not confuse a data protection complaint with a request by a data subject to exercise one of their rights under the UK GDPR. This is very important because data subjects have prescribed rights under the UK GDPR and these are separate from

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Existing user? Sign-in TAKE A FREE TRIAL
Powered by Lexis+®
Latest Risk & Compliance News

Government sets out response following AML/CTF supervision consultation

HM Treasury (HMT) has published the government’s response to the Anti-Money Laundering/Counter-Terrorist Financing (AML/CTF) Supervision Reform:...

ICO confirms John Edwards' resignation after workplace investigation

The Information Commissioner’s Office (ICO) has confirmed that Information Commissioner, John Edwards, had resigned after submitting his resignation...

FCA’s Therese Chambers discusses behind-the-scenes work to tackle financial crime

The Financial Conduct Authority (FCA) has published a speech by its joint executive director of enforcement and market oversight, Therese Chambers, on...

Risk & Compliance weekly highlights—18 June 2026

This week's edition of Risk & Compliance weekly highlights includes the EDPB's consultation on a standardised EU GDPR personal data breach...

View Risk & Compliance by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit
Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

Late payment penalties—inheritance tax

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit