Complaints about Data Protection

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA) 2018 provide you with rights in relation to how Gloucestershire County Council (the council) collects, uses and protects (processes) your personal data. If you are dissatisfied with how we have handled your personal data or believe we have not complied with data protection legislation, you have the right to raise a complaint with us under Section 164A of the DPA 2018.

This procedure explains how you can make a complaint about the council’s handling of your personal data. In this procedure, a ‘complaint’ refers to an expression of dissatisfaction with how the council has processed your personal data, responded to your Data Protection Rights Request (such as a Subject Access Request (SAR)) or otherwise complied with data protection legislation.

Where possible, we will seek to resolve concerns informally in the first instance, for example by providing clarification or additional explanation. However, you may make a formal data protection complaint with us at any time. If you are not happy with how we respond to your complaint then you can contact the Information Commissioner’s Office (ICO). How to do this is set out in Section 5. 5. What can you do if you are not satisfied with the response to your complaint?