Handling Data Protection Complaints

This guidance explains how you should recognise, record, escalate and support the handling of data protection complaints and should be followed whenever an employee, worker, customer, client or other individual raises concerns about how you have handled their personal information.What Is a Data Protection Complaint?A data protection complaint is any complaint where a person believes someone has breached data protection law through the way they collected, used, stored, shared, retained, secured or responded to requests about the individual’s personal information.You should treat a concern as a possible data protection complaint where it relates to matters such as a subject access request, inaccurate personal data, excessive retention of information, unauthorised disclosure, a data breach…