Blog
Guides on UK data protection complaints and DUAA compliance for organisations without a legal team.
-
Do small businesses need a DUAA complaints procedure?
Yes — every UK data controller needs a data protection complaints procedure from 19 June 2026. There is no SME exemption under the DUAA.
Read article → -
DUAA 30-day acknowledgement explained
How the 30-day data protection complaint acknowledgement deadline works under the DUAA — calendar rules, weekends, bank holidays, and ICO examples.
Read article → -
What is Section 164A of the DPA 2018?
Section 164A creates the statutory right for individuals to complain to UK data controllers about data protection infringements. Here's what it means for your organisation.
Read article →
See also: DUAA complaints procedure guide