UK businesses have under one month to put a data protection complaints process in place, before new legal requirements come into force on 19 June 2026.
From that date, all organisations will be legally required to handle data protection complaints under the Data (Use and Access) Act 2025.
We recommend that you read the ICO’s blog https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/one-month-to-go-what-businesses-need-to-know-to-meet-new-data-law/ which includes a link to some very clear guidance, and take action if you have not already done so.