As a part of DUAA changes, every organisation is now legally required to have a written policy in the event that someone wishes to make a formal complaint about how their personal data is being used. This is over and above the policy for data subject rights.
Have you recently updated your complaints policy to include data protection complaints? If not, get in touch for a free 25-minute insight call, and we can talk you through it.