The Data (Use and Access) Act 2025 has turned data protection complaint-handling into a statutory duty. Organisations must acknowledge your complaint within 30 days and respond without undue delay — and the ICO route behind them has been reformed, with a tribunal backstop if the regulator itself stalls. A step-by-step playbook for the new complaints landscape.
Written by John Barwell