Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), individuals are encouraged to raise data protection concerns directly with the organisation first.
This approach has been strengthened by new legislation, the Data (Use and Access) Act 2025 (DUAA), which amends the UK GDPR and DPA 2018 and introduces a statutory requirement for organisations to have a clear, accessible process for handling data protection complaints. The aim is to resolve issues as quickly and fairly as possible, without the need for escalation to the regulator in most cases.
You can still contact the Information Commissioner’s Office (ICO) using the details below if you remain dissatisfied after we have responded, but the ICO will expect you to have raised your concern with us first.
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF