What can you complain about?

You can complain about how the council has handled your personal data or complied with data protection legislation.

Concerns about your data protection rights

You can complain if you are dissatisfied with how we have handled your rights under data protection law, including:

• A request to access your personal data (SAR)
• A request to rectify inaccurate personal data
• A request to erase your personal data
• A request to restrict or object to processing of your personal data
• A request relating to automated decision making or profiling

This includes where you believe:

• We have not responded within the required timeframe
• Your request has been refused or only partially fulfilled
• We have not adequately explained our decision

Concerns about how your personal data is used

•    Your personal data has been used in a way you do not expect or understand
•    Your personal data has been shared inappropriately
•    Your personal data has been kept for longer than necessary
•    Your personal data has not been kept secure

Other data protection complaints

You can also raise a complaint if you believe the council has not complied with its obligations under data protection legislation more generally.

If your complaint relates to a Freedom of Information (FOI) or Environmental Information Regulations (EIR) response, then you must follow the Freedom of Information and Environmental Information Requests Internal Review and Complaints Procedure. 

If your concern relates to a general complaint about council services rather than the handling of your personal data, it will be managed under the council’s corporate complaints procedure.