Data Protection Complaints Pack (2026) — for the 19 June Data (Use & Access) Act deadline

From 19 June 2026, the Data (Use and Access) Act 2025 gives people the right to complain directly to your organisation about how you handle their personal data. Every UK organisation that holds personal data is in scope — no exemptions (small businesses, charities and sole traders included).

You must give people a way to complain (an electronic form plus another route), acknowledge within 30 days, investigate properly, and signpost the ICO. This pack gives you all of it, ready to brand and use:

• Data Protection Complaints Handling Policy & Procedure
• Complaint form (electronic + paper)
• Acknowledgement & response letter templates (incl. the 30-day acknowledgement)
• Complaints register / log
• One-page staff quick-guide
• "Are you ready for 19 June?" master checklist

Built by a CQC-rated, ISO-certified compliance business. Instant download, fully editable in Word, no subscription — about 30 minutes to brand and adopt.

Editable templates to help you build your own process — not legal advice. Adapt them and verify against the Act and current ICO guidance. Hiscock & Co Ltd accepts no liability.