Data Protection Complaints The UKGDPR and Data Protection Act 2018 has, since 2018, provided both Consumers and Employees with enhanced data protection rights and protections. One area of uncertainty, particularly for employers, is how to respond where a data subject, including employees, complains about how their data is being used. Under The Data Use and Access Act 2025 , From 19 June 2026 all organisations now have a positive obligation to facilitate and manage data protection complaints received. This includes: Giving individuals a clear way of making data protection complaints, including providing a complaint form which can be completed electronically. Acknowledging complaints in a timely fashion, and in any event within the period of 30 days beginning when the complaint is received; without undue delay an organisation must take appropriate steps to respond to the complaint , including informing the complainant of the outcome. In Conclusion Whilst this may appear onerous at first, it is our opinion that requirement is a good thing. Implementing a clear complaints process will ensure that an organisation can investigate any data complaints and should intercept and resolve any issues before they reach the ICO. Why members need to engage with this in advance of a complaint, is that the Act does not dictate what format must take. There is no format or wording to be used, and a simple statement expressing concern about the use of any personal data can may trigger an organisations obligation. Whilst this advice is general in nature and will need to be tailored to any one situation, we would advise that all members review their current complaints policy to ensure that it is clear, and that staff are sufficiently aware of the process and how to direct anyone who complains. As a minimum any complaints process should include an ability to raise a complaint in writing electronically. Most organisations in the motor industry have a clear complaints process in place that is likely to comply with the Act. The issue here is likely to be ensuring that staff are sufficiently familiar with the process to be able to capture any complaints and to direct them accordingly, especially where the complaints are from an organisation’s own employees. If you do not currently have a process in place, or have any further questions, as an RMI member you have access to the RMI Legal advice line, as well as a range of industry experts who can assist you. If you find yourself facing any of the issues outlined above, please contact us at any stage for advice and support as appropriate. Motor Industry Legal Services Motor Industry Legal Services provides fully comprehensive legal advice and representation to UK motor retailers for one annual fee. It is the only regulated law firm in the UK which specialises in motor law and motor trade law. MILS currently advises over 1,000 individual businesses within the sector as well as the Retail Motor Industry Federation (RMI) and its members.