If an organisation doesn't respond

Last checked: 12 Oct 2026

If an organisation ignores your request to object, delete or see your data, or you're unhappy with its answer, there are two steps: complain to the organisation, then to the regulator.

1. Complain to the organisation

1. Check its complaints process: its privacy notice, a complaints page, or by asking. Use its form or complaints email if it has one; otherwise write a letter or email. The regulator has a template.
2. Keep a record, and follow up any phone complaint in writing.

Since 19 June 2026, the organisation has 30 days to acknowledge your complaint, starting the day after it receives it. It must then give you an outcome without unjustifiable or excessive delay; the law doesn't set a fixed deadline for the outcome.

2. Complain to the regulator

• Who: the Information Commission, which replaced the Information Commissioner's Office (ICO) on 30 September 2026. Its website is still ico.org.uk and still says "ICO".
• When: you can complain at any time, but the regulator recommends giving the organisation a chance to finish its own process first. Its SAR guidance says to complain within three months of your last meaningful contact with the organisation.
• How: through the online complaint form. Have a copy of your complaint to the organisation ready.
• How long: the regulator says complaints that need closer examination are currently assigned to a case officer around 10 months after submission.
• What it can't do: it can't award compensation. You can claim compensation from the organisation directly or through the courts, ideally with independent legal advice.

Sources

• Information Commission (ICO website): How to make a data protection complaint (published 29 Jun 2026)
• Information Commission: Data protection complaints
• Information Commission: Check if you can complain
• Information Commission: What to do if you don't get a SAR response or are unhappy with it
• Data (Use and Access) Act 2025, s.103 (complaints to controllers)
• Data (Use and Access) Act 2025 (Commencement No. 9) Regulations 2026 (Information Commission)

This page describes your options and how organisations say they handle requests. It isn't legal advice. See About & sourcing to report a correction.