Section 103(2)

Before section 165 (but after the italic heading before it) insert— A data subject may make a complaint to the controller if the data subject considers that, in connection with personal data relating to the data subject, there is an infringement of the UK GDPR or Part 3 of this Act. A controller must facilitate the making of complaints under this section by taking steps such as providing a complaint form which can be completed electronically and by other means. If a controller receives a complaint under this section, the controller must acknowledge receipt of the complaint within the period of 30 days beginning when the complaint is received. If a controller receives a complaint under this section, the controller must without undue delay— take appropriate steps to respond to the complaint, and inform the complainant of the outcome of the complaint. The reference in subsection (4)(a) to taking appropriate steps to respond to the complaint includes— making enquiries into the subject matter of the complaint, to the extent appropriate, and informing the complainant about progress on the complaint. The Secretary of State may by regulations require a controller to notify the Commissioner of the number of complaints made to the controller under section 164A in periods specified or described in the regulations. Regulations under this section may provide that a controller is required to make a notification to the Commissioner in respect of a period only in circumstances specified in the regulations. Regulations under this section may include— provision about a matter listed in subsection (4), or provision conferring power on the Commissioner to determine those matters. The matters are— the form and manner in which a notification must be made, the time at which, or period within which, a notification must be made, and how the number of complaints made to a controller during a period is to be calculated. Regulations under this section are subject to the negative resolution procedure.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04