Whilst most charities have focused on the charitable soft opt-in changes in the new legislation, there is also a change to data protection complaints procedures, putting into law the existing best practice guidance from the ICO.
It says that “An organisation must take steps to help you if you want to make a complaint about how it uses your personal information, such as providing an electronic complaints form. It also must acknowledge your complaint within 30 days and respond to it ‘without undue delay’.”
This can either be a separate policy, or included as part of your existing general complaints policy, or an element of your data subject rights policy.
However you implement it, please make sure your staff are aware and ready to deal with complaints within the 30 day timeframe and in an appropriate manner.