Your data protection complaint handling process
In short
Placeholder 40 word summary answering what a complaint handling process is, the stages it must cover, and the deadlines that apply to a UK organisation from 19 June 2026.
Why you need a written process
Placeholder copy.
Stage one: intake
Placeholder copy.
Stage two: acknowledgement
Placeholder copy.
Stage three: investigation
Placeholder copy.
Stage four: outcome
Placeholder copy.
Stage five: records and review
Placeholder copy.
Related guides
- How to handle a GDPR complaint step by step
The numbered run through from receipt to outcome letter.
- What to record in your data protection complaint log
The records the ICO can ask to see.
- Section 164A of the Data Protection Act 2018
The statutory wording behind the process.
Common questions
- What should a written procedure contain?
- Placeholder answer.
- Who should own the process internally?
- Placeholder answer.
- Where should we publish it?
- Placeholder answer.
- How often should we review it?
- Placeholder answer.
This is general information, not legal advice.