If someone raises a concern about how your organisation has handled their personal information, it helps to have a clear process in place.
We’ve added new guidance to the E-Portal to help charities and community organisations understand how to handle data protection complaints clearly and consistently.
Handling data protection complaints
Our new guidance covers the key steps to consider when responding to a complaint, including:
- Understanding what the complaint is about
- Keeping clear records
- Responding within appropriate timescales
- Explaining your decision clearly
- Knowing when someone may wish to raise their concern with the Information Commissioner’s Office (ICO)
Read our guidance on Handling Data Protection Complaints
Check if your organisation is ready
We’ve also created a practical checklist to help you review whether your organisation has the right processes in place to handle a data protection complaint.
View the guidance and readiness checklist
Review your wider data protection arrangements
You can also find guidance on wider data protection responsibilities in the E-Portal’s Data Protection section.
Explore Data Protection guidance
You can also use our free self-assessment to review your organisation’s current data protection arrangements and identify areas that may need attention.
Take the Data Protection Self-Assessment