About this site

Privacy Complaints publishes plain English information for UK small businesses, office managers and data protection leads. The site focuses on the practical work involved in receiving, investigating and recording data protection complaints.

Why we built it

Section 164A of the Data Protection Act 2018 creates defined complaint handling duties from 19 June 2026. The section was inserted by section 103 of the Data (Use and Access) Act 2025. This site turns those duties into short guides and usable starting points.

[VERIFY: add the site owner's name and reason for creating Privacy Complaints.]

How we source our information

Our guidance refers to Section 164A, the Data (Use and Access) Act 2025 and the ICO guidance on dealing with data protection complaints dated 12 February 2026. We do not invent enforcement examples, figures or quotations.

We are not the Information Commissioner's Office and we are not endorsed by it. The material is general information, not advice about an individual complaint.