The regulations regarding data handling and how to process data protection complaints are changing. By June 2026, organisations must have a process in place for handling data protection complaints. A complaint can come from anyone who’s unhappy with how an organisation has handled their personal information.
To support small and medium enterprises (SMEs) with this change, the Information Commissioner’s Office (ICO) is set to publish guidance to help firms prepare for the change, and is conducting a consultation process to ensure the documents are well received and valuable.
The draft guidance is available now and the ICO is accepting feedback until 19 October 2025.
A separate consultation on how the ICO handles data protection complaints is open until 31 October 2025. It will determine the appropriate level of investigation the ICO gives to data protection complaints. View the consultation on the ICO website.
