Description
New right to complain comes into force under the UK DUAA. Controllers must acknowledge complaints within 30 days and provide full response without undue delay. This formalizes complaint handling procedures under UK data protection law for the first time.
Requirements
- Establish formal complaint acknowledgment process (30-day SLA)
- Create complaint response workflow
- Train staff on complaint handling procedures
- Document complaint handling policy
- Set up complaint tracking and reporting system
Applicable To
All data controllers under UK GDPROrganizations processing UK resident data
Penalty Information
âš Non-compliance subject to ICO enforcement under UK GDPR penalty framework (up to GBP 17.5 million or 4% global turnover).