From 19 June 2026, UK businesses must follow strict new rules for handling data protection complaints. Miss a deadline and you could face an ICO investigation.
Anyone can complain about how you handle their data. You must acknowledge within 30 days, investigate without delay, and document everything. The ICO expects a formal process.
Fail to follow the complaints framework and the ICO can investigate. Even one mishandled complaint can trigger a formal inquiry. The legislation came into force 19 June 2026.
If you're tracking complaints in a spreadsheet or your inbox, you're one busy week away from missing a deadline. For most micro-businesses, hiring a DPO isn't an option.
Date, channel, complainant, nature. 30 seconds.
Auto-calculated dates. Colour-coded urgency warnings.
ICO-compliant templates, auto-populated. One click.
Every action logged. One-click export for ICO inspection.
Handle a data protection complaint correctly in under 5 minutes, with no legal training required.
Record every complaint: who, when, what channel, what it's about.
Auto-calculated deadlines with colour warnings: green, amber, red.
Acknowledgement, update, and outcome letters — ICO-compliant. Pre-filled with case details.
One-click PDF of the full complaint lifecycle. Ready for ICO inspection.
Quick checklist: does your privacy notice meet DUA requirements?
1-page "how to spot a data protection complaint" for your team.
Coming soon. Join the waitlist below to get early access and founder pricing.
Perfect for businesses with 1-49 employees handling personal data:
E-commerce sellers • Recruitment agencies • Professional services firms • Hospitality businesses • Small charities • Community organisations
Not for large enterprises with existing DPOs (you need OneTrust or Securiti).
No. We provide templates based on ICO guidance, but they're not a substitute for legal advice. For complex or high-risk complaints, consult a data protection solicitor.
The ICO provides generic templates and guidance PDFs. We give you a workflow: log, track, respond, and audit — all personalised to your case, with deadline reminders. The ICO tells you what the rules are; we help you follow them.
The DUAA framework is new — most businesses haven't had a complaint yet. But the rules are now in force. Being prepared costs less than being caught out. It's insurance, not emergency response.
Free compliance checklist. Set up in under 5 minutes. No credit card required.