What the Data Use and Access Act means for you

We've made it easier to make a data protection complaint.

We’ve introduced a new formal process for managing data protection complaints, to help us align with the Data Use and Access Act (DUAA).

DUAA adds to existing UK law around data protection, making it easier for people to hold organisations to account if they feel their data has been mishandled.

If you’re not happy with the way we’ve handled your data, or you think we haven’t responded appropriately to a Subject Access Request (SAR) or any other sort of personal data request, you can make a complaint by filling in this form on our website.

You can also make a complaint through any of our usual contact methods.

You don’t have to use any specific legal language or even the word complaint – if you’re not happy with the way we’ve used your data, we’ll take it seriously and make sure we investigate for you. We’ll acknowledge any complaint we receive within 30 days, and we’ll respond as soon as we’re able to.

If we’ve responded to your complaint and you’re not satisfied with the way we’ve resolved it, you can escalate it to the Information Commissioners’ Office (ICO).

You can also make a complaint about a service you’ve received from Futures. This would go through our usual complaints procedure, which you can find information about here.