Data Protection (Use & Access) Act Readiness Pack (2026)

The Data (Use and Access) Act 2025 is now in force (from 19 June 2026). People can complain directly to your organisation about how you handle their personal data — and every UK organisation that holds personal data is in scope, with no exemptions for small businesses, charities or sole traders.

You must offer a way to complain (an electronic form plus one other route), acknowledge within 30 days, investigate properly, and signpost the ICO. This pack gives you the whole process, ready to brand and use.

This is for…

Any UK organisation that holds personal data and needs a compliant complaints process quickly — care providers, small businesses, charities and sole traders. No data-protection expertise required.

What's included

• Data Protection Complaints Handling Policy & Procedure
• Complaint form (electronic + paper)
• Acknowledgement & response letter templates (including the 30-day acknowledgement)
• Complaints register / log
• One-page staff quick-guide
• "Are you ready?" master checklist

What happens after you buy

You get the files immediately — a download link on the confirmation screen and by email. Open them in Word, add your organisation's name and logo, and adopt the process the same day (about 30 minutes start to finish).

Editable in Word · Instant download · Yours to keep forever (no subscription) · 14-day make-it-right guarantee.

Do not buy this if…

You already have a complaints policy, form and register that meet the Data (Use and Access) Act — or you want it done for you rather than a template to brand yourself. (For hands-on help, book a Readiness Review instead.)

Not sure where your gaps are? Take the free 2-minute self-check first.

£29 — one-time. Single-organisation licence.

Editable templates to help you build your own process — not legal advice. Adapt them and verify against the Act and current ICO guidance. © Hiscock & Co Ltd · Companies House 16271445 · hiscockco.co.uk · Hiscock & Co Ltd accepts no liability.