31 May 2026
by Anthony Collins Solicitors LLP

From 19 June 2026, all UK organisations handling personal data must have a formal process for receiving, investigating, and resolving data protection complaints under the Data (Use and Access) Act.

This means that organisations will need to review whether their existing processes and systems support compliance and allow for accessible, visible complaints submission with appropriate acknowledgement, investigation, response, and record keeping.

Ben Pumphrey at Anthony Collins Solicitors has published a new blog outlining the practicalities of what you might need to do.

Related topics