Under the Data Protection Act (1998), those organisations that collect and use personal information have to follow rules of good practice for handling such data. The Act also gives rights to individuals whose information they keep. These rights include the right to complain should you believe your personal data has been processed inappropriately.
What you can complain about
You can complain to us if you have been denied any of your rights under the Data Protection Act. This includes your right to see the information an organisation holds about you, or if the information about you is used, held or disclosed:
- for a reason that is not the one it was collected for
- without proper security
Or, if the information about you is:
- inadequate, irrelevant or excessive
- inaccurate or out of date
- kept for longer than is necessary
You can also complain if you feel we have not provided you with all relevant information as part of a subject access request.
How to make a complaint
Make it clear that you are making a complaint about a matter concerning Data Protection and provide as much detail as you can. Tell us your name and how to contact you.
What happens next
Your complaint will be treated confidentially and fully investigated. You will receive an acknowledgment within 5 working days of receipt of the complaint. A full investigation and any decision will be made and conveyed to you within a further 15 working days, or in exceptional circumstances, within a further 35 working days.
If we are unable to deal with your complaint within this time we will inform you and let you know the reason for the delay. If your complaint is upheld you will be notified of what action will be taken. If the complaint is not upheld you will be given a reason for the decision.
If you are not happy with our response to your complaint