UK Introduces New Data Protection Complaint Requirements for Employers

The United Kingdom has introduced new requirements governing how organizations receive and respond to data protection complaints from employees. Effective June 19, 2026, Section 164A of the Data Protection Act 2018 gives data subjects a statutory right to complain directly to a controller (usually their employer) if they believe the controller has infringed UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) or applicable provisions of the Data Protection Act. Read more.