Make a data protection complaint
You can use our online form to submit a data protection complaint to us.
Examples of data protection complaints
Examples of data protection complaints include:
- If you're concerned that personal data has not been handled securely
- If you feel information has not been obtained fairly
- If you have difficulties accessing your personal information
- If personal data had been retained for longer than was necessary
When you should complain
We will not usually investigate concerns where there has been an undue delay in telling us about the issue.
You should raise your concerns with us within three months of your last meaningful contact with us.
After you complain
Your complaint will usually be considered by the Information Governance Manager. They will:
- Log your complaint
- Undertake any necessary investigations and respond direct to you within 30 working days. Where it is not possible to meet the 30-day deadline, you will be advised. An alternative timescale will be notified
If your complaint is about the Information Governance Manager, it will be referred direct to the Data Protection Officer.
Serious complaints
In the case of a serious complaint, the Information Governance Manager may refer the complaint to the Council’s Data Protection Officer to consider, following the same process.
Service delivery issues
If your complaint also involves a service delivery issue that does not relate to data protection, that element of your complaint will be dealt with separately through our Corporate Complaints procedures.
If you're not satisfied
You can complain to the Information Commissioner’s Office (ICO) if you're not happy with our response.
The ICO is the UK regulatory body for data protection matters. Read about how the ICO handles data protection complaints.
Make your complaint
Complete our online form to make your complaint. You can upload any supporting evidence on the form.
If you're making a complaint on behalf of someone else, you have to upload their written authority.