Is your data protection complaints process ready?
Since 19 June 2026, section 164A of the Data Protection Act 2018 has required every UK controller to run a data protection complaints process. This ten-minute check scores your position across five areas and gives you a prioritised action list.
20 questions. Nothing you enter leaves this page: no cookies, no analytics, no data sent anywhere. Answer for how things work in practice, not how the policy reads.
Overall readiness
0%
By area
Your priorities
Ordered by area, starting with the weakest. Fix the first three before anything else.
Want a second opinion?
A full readiness assessment tests these areas against your actual procedures, correspondence and case records, and takes one to two weeks. Initial conversations are free and confidential.
The email button opens your own email app with your scores filled in. Nothing is sent unless you choose to send it.
This check is a general guide to readiness, not legal advice, and it does not cover every requirement. Based on section 164A of the Data Protection Act 2018 and the ICO's guidance on handling data protection complaints, published 12 February 2026.