{"id":1226,"date":"2026-09-08T17:23:09","date_gmt":"2026-09-08T17:23:09","guid":{"rendered":"https:\/\/blog.equalityanddiversity.co.uk\/?p=1226"},"modified":"2026-09-08T17:24:28","modified_gmt":"2026-09-08T17:24:28","slug":"data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules","status":"publish","type":"post","link":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/","title":{"rendered":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">From 19 June 2026, organisations that process personal data face an important new legal responsibility under the Data (Use and Access) Act 2025 (DUAA).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For many organisations, this change may require a significant shift in how data protection complaints are identified, recorded, investigated and resolved.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The message from the legislation is clear: organisations must take ownership of data protection complaints and provide individuals with a meaningful opportunity to have concerns addressed internally before they escalate matters to the Information Commissioner&#8217;s Office (ICO).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A Data Protection Complaint Could Arrive Anywhere<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the biggest misconceptions organisations have is that data protection complaints only arrive through formal channels.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In reality, a complaint may be raised through:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A social media message<\/li>\n\n\n\n<li>A live chat conversation<\/li>\n\n\n\n<li>A customer service enquiry<\/li>\n\n\n\n<li>An HR discussion<\/li>\n\n\n\n<li>An email to a member of staff<\/li>\n\n\n\n<li>A complaint made during a meeting<\/li>\n\n\n\n<li>A concern raised to a manager or supervisor<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Under the new requirements, the channel used does not change the organisation&#8217;s responsibilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If an individual is expressing concern about how their personal data has been collected, used, stored, shared or managed, your organisation may have a legal obligation to act.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This means every employee\u2014not just compliance teams or Data Protection Officers\u2014needs to understand how to recognise and escalate a data protection complaint.<strong><br><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What Does the Law Require?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DUAA introduces specific expectations around complaint handling.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should ensure they can demonstrate that they have:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Acknowledged Complaints Promptly<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Complaints must be acknowledged within 30 days of receipt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Individuals should be informed that their concern has been received and advised of the next steps.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Investigated Concerns Appropriately<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Complaints should be reviewed without unnecessary delay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should have clear internal procedures outlining who investigates complaints, how evidence is gathered and how decisions are reached.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kept Individuals Informed<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">People raising concerns should receive updates throughout the process and be provided with a clear explanation of the outcome.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Good communication is not only a legal requirement\u2014it also helps build trust and confidence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Maintained Detailed Records<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should maintain clear audit trails showing:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>When the complaint was received<\/li>\n\n\n\n<li>How it was identified<\/li>\n\n\n\n<li>Who was responsible for the investigation<\/li>\n\n\n\n<li>Actions taken<\/li>\n\n\n\n<li>Communications with the complainant<\/li>\n\n\n\n<li>The final outcome<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If the ICO becomes involved, these records may be essential in demonstrating compliance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Why Staff Training Matters More Than Ever<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Many organisations already provide annual GDPR or data protection training.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, the DUAA highlights the need for practical awareness across the workforce.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ask yourself:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Would your reception staff recognise a data protection complaint?<\/li>\n\n\n\n<li>Would your HR team know when to escalate a concern?<\/li>\n\n\n\n<li>Would customer service staff know how to log and record an issue?<\/li>\n\n\n\n<li>Would managers understand their responsibilities?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If the answer is &#8220;not sure&#8221;, there may be a compliance gap that needs addressing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most effective organisations are moving beyond compliance-only training and ensuring that everyone understands their role in the complaint handling process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Accessibility and Inclusion Cannot Be Overlooked<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An often-overlooked aspect of complaint handling is accessibility.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">People may choose different communication methods because of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Disability<\/li>\n\n\n\n<li>Neurodivergence<\/li>\n\n\n\n<li>Language barriers<\/li>\n\n\n\n<li>Cultural preferences<\/li>\n\n\n\n<li>Literacy levels<\/li>\n\n\n\n<li>Digital exclusion<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should ensure complaint processes are accessible, inclusive and responsive to individual needs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Providing multiple routes for raising concerns, using clear language and offering reasonable adjustments can help ensure that nobody is disadvantaged when exercising their data protection rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Embedding equality, diversity and inclusion into complaint handling processes is not only good practice\u2014it supports compliance, trust and fairness.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Five Actions Organisations Should Take Now<\/strong><\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Review existing complaint handling procedures.<\/li>\n\n\n\n<li>Ensure data protection complaints can be identified across all communication channels.<\/li>\n\n\n\n<li>Train staff on recognising and escalating complaints.<\/li>\n\n\n\n<li>Implement robust recording and audit trail processes.<\/li>\n\n\n\n<li>Review accessibility and equality considerations within complaint procedures.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The Bottom Line<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Data (Use and Access) Act 2025 is more than a technical compliance update.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It places greater accountability on organisations to recognise, investigate and resolve data protection complaints effectively.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Those that invest now in staff awareness, accessible processes and robust complaint management systems will be better positioned to reduce risk, maintain public trust and demonstrate compliance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The question is not whether your organisation will receive a data protection complaint.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The question is whether every member of staff will know what to do when one arrives.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>From 19 June 2026, organisations that process personal data face an important new legal responsibility under the Data (Use and Access) Act 2025 (DUAA). For many organisations, this change may require a significant shift in how data protection complaints are identified, recorded, investigated and resolved. The message from the legislation is clear: organisations must take [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[11],"tags":[],"class_list":["post-1226","post","type-post","status-publish","format-standard","hentry","category-social-justice-and-advocacy-2"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog\" \/>\n<meta property=\"og:description\" content=\"From 19 June 2026, organisations that process personal data face an important new legal responsibility under the Data (Use and Access) Act 2025 (DUAA). For many organisations, this change may require a significant shift in how data protection complaints are identified, recorded, investigated and resolved. The message from the legislation is clear: organisations must take [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/\" \/>\n<meta property=\"og:site_name\" content=\"Equality and Diversity UK Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-08T17:23:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-08T17:24:28+00:00\" \/>\n<meta name=\"author\" content=\"Alyson Malach\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alyson Malach\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/\"},\"author\":{\"name\":\"Alyson Malach\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#\\\/schema\\\/person\\\/1b4d93e7bb7b9d019c28bbaad71703b1\"},\"headline\":\"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules?\",\"datePublished\":\"2026-09-08T17:23:09+00:00\",\"dateModified\":\"2026-09-08T17:24:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/\"},\"wordCount\":717,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#organization\"},\"articleSection\":[\"Legal matters\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/\",\"url\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/\",\"name\":\"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#website\"},\"datePublished\":\"2026-09-08T17:23:09+00:00\",\"dateModified\":\"2026-09-08T17:24:28+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/2026\\\/09\\\/08\\\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/\",\"name\":\"Equality and Diversity UK Blog\",\"description\":\"Blog by Equality and Diversity UK\",\"publisher\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#organization\",\"name\":\"Equality and Diversity UK Blog\",\"url\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/cropped-eduk-logo-300.png\",\"contentUrl\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/cropped-eduk-logo-300.png\",\"width\":300,\"height\":300,\"caption\":\"Equality and Diversity UK Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/#\\\/schema\\\/person\\\/1b4d93e7bb7b9d019c28bbaad71703b1\",\"name\":\"Alyson Malach\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g\",\"caption\":\"Alyson Malach\"},\"sameAs\":[\"https:\\\/\\\/blog.equalityanddiversity.co.uk\"],\"url\":\"https:\\\/\\\/blog.equalityanddiversity.co.uk\\\/index.php\\\/author\\\/jojoblog\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/","og_locale":"en_GB","og_type":"article","og_title":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog","og_description":"From 19 June 2026, organisations that process personal data face an important new legal responsibility under the Data (Use and Access) Act 2025 (DUAA). For many organisations, this change may require a significant shift in how data protection complaints are identified, recorded, investigated and resolved. The message from the legislation is clear: organisations must take [&hellip;]","og_url":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/","og_site_name":"Equality and Diversity UK Blog","article_published_time":"2026-09-08T17:23:09+00:00","article_modified_time":"2026-09-08T17:24:28+00:00","author":"Alyson Malach","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alyson Malach","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/#article","isPartOf":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/"},"author":{"name":"Alyson Malach","@id":"https:\/\/blog.equalityanddiversity.co.uk\/#\/schema\/person\/1b4d93e7bb7b9d019c28bbaad71703b1"},"headline":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules?","datePublished":"2026-09-08T17:23:09+00:00","dateModified":"2026-09-08T17:24:28+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/"},"wordCount":717,"commentCount":0,"publisher":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/#organization"},"articleSection":["Legal matters"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/","url":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/","name":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules? - Equality and Diversity UK Blog","isPartOf":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/#website"},"datePublished":"2026-09-08T17:23:09+00:00","dateModified":"2026-09-08T17:24:28+00:00","breadcrumb":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/2026\/09\/08\/data-use-and-access-act-2025-is-your-organisation-ready-for-the-new-data-protection-complaint-rules\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.equalityanddiversity.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data (Use and Access) Act 2025: Is Your Organisation Ready for the New Data Protection Complaint Rules?"}]},{"@type":"WebSite","@id":"https:\/\/blog.equalityanddiversity.co.uk\/#website","url":"https:\/\/blog.equalityanddiversity.co.uk\/","name":"Equality and Diversity UK Blog","description":"Blog by Equality and Diversity UK","publisher":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.equalityanddiversity.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/blog.equalityanddiversity.co.uk\/#organization","name":"Equality and Diversity UK Blog","url":"https:\/\/blog.equalityanddiversity.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/blog.equalityanddiversity.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/blog.equalityanddiversity.co.uk\/wp-content\/uploads\/2024\/10\/cropped-eduk-logo-300.png","contentUrl":"https:\/\/blog.equalityanddiversity.co.uk\/wp-content\/uploads\/2024\/10\/cropped-eduk-logo-300.png","width":300,"height":300,"caption":"Equality and Diversity UK Blog"},"image":{"@id":"https:\/\/blog.equalityanddiversity.co.uk\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/blog.equalityanddiversity.co.uk\/#\/schema\/person\/1b4d93e7bb7b9d019c28bbaad71703b1","name":"Alyson Malach","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/878648ac954b51119effc1b58c8e283abd18c3408cfdf7a4c829129cda1a1503?s=96&d=mm&r=g","caption":"Alyson Malach"},"sameAs":["https:\/\/blog.equalityanddiversity.co.uk"],"url":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/author\/jojoblog\/"}]}},"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"Alyson Malach","author_link":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/author\/jojoblog\/"},"uagb_comment_info":0,"uagb_excerpt":"From 19 June 2026, organisations that process personal data face an important new legal responsibility under the Data (Use and Access) Act 2025 (DUAA). For many organisations, this change may require a significant shift in how data protection complaints are identified, recorded, investigated and resolved. The message from the legislation is clear: organisations must take&hellip;","_links":{"self":[{"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=1226"}],"version-history":[{"count":2,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1226\/revisions"}],"predecessor-version":[{"id":1228,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1226\/revisions\/1228"}],"wp:attachment":[{"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=1226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=1226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.equalityanddiversity.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=1226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}