DUAA 2025 Data protection Complaint Process
Under the new Data Usage and Access Act (DUAA 2025) Individuals have the right to raise a data protection complaint if they believe that their personal data has been processed unlawfully, inaccurately, or in a manner that does not comply with data protection legislation.
At The Executive Office we will provide accessible means for individuals to submit data protection complaints. This is highlighted in our Privacy Notice. ( TEO Privacy Notice | The Executive Office) The complaint can be made by email, hard copy, post or verbally. These are separate and apart from other complaints and will still follow the same process. The attached form Data Protection Complaint Form will provide the information required to allow us to process your complaint quickly and efficiently.
All data protection complaints must be submitted direct to The Executive Office Data Protection Officer. The DPO will log the complaint immediately and acknowledge the complaint within 30 days of receipt. The complaint will be processed without delay with appropriate enquiries put in place based on the circumstances of each complaint. The final response will depend on the nature, complexity, scope, and scale of the complaint. TEO will keep you regularly informed on the progress of the complaint.
To make a data protection complaint, individuals should provide sufficient detail to allow the matter to be properly assessed. This should include:
- what your complaint is about.
- your details, name, contact details, preferred method of contact.
- the date or period when the issue occurred.
- any relevant correspondence in regard to supporting evidence and relationship to TEO.
- the outcome or resolution being sought.
Checklist: What to Do
Before submitting a complaint, individuals should ensure that the following steps have been completed:
- ensure TEO is the right organisation responsible for processing the personal data.
- clearly define the nature of the complaint
- gather all relevant information, including dates as highlighted above.
- check the organisation’s privacy notice.
- complete the data protection complaint form.
- retain a copy of the complaint and any supporting documentation for personal records.
- submit the complaint e.g. by email, online form, post, or phone but not limited to these means.
- allow 30 days for TEO to acknowledge and respond in accordance with DUAA 2025 Section 103.
Upon completion of the investigation, TEO will provide a response outlining its findings and any actions taken.
If you remain unhappy with how your DP complaint was handled, you have the right to contact:
Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113