Data protection complaints (s.164A)

Conditions Data protection

Check a controller's complaints process against the duty that applies to complaints received from 2026-06-19.

0 of 4

The duty People can complain to the controller about an infringement of the UK GDPR or Part 3 DPA 2018 relating to their data DPA 2018 s.164A(1) Complaining is made easy, for example by providing an electronic complaint form DPA 2018 s.164A(2) Complaints are acknowledged within 30 days of receipt DPA 2018 s.164A(3) Appropriate steps are taken to respond without undue delay, including enquiries and progress updates, and the outcome is given DPA 2018 s.164A(4) and (5)

Good practice Complaints are logged so the regulator can be shown how they were handled UK GDPR Art 5(2) The response tells the complainant they can complain to the Information Commission UK GDPR Art 77

Result: Tick the items that apply.

Where this applies

Sources

Primary Data Protection Act 2018, section 164A legislation.gov.uk
Primary Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 (SI 2026/82) legislation.gov.uk