
Based on a Privacy World blog by David Naylor, Robert Lister & Dan Fara, adapted for Employment Law Worldview by David Whincup
The UK’s data protection framework continues to evolve following the enactment of the Data (Use and Access) Act 2025. One of the more operationally significant developments for employers is the introduction of a new statutory right for employees to complain to controllers regarding infringements of the GDPR, as well as a framework governing how controllers must handle those complaints.
From 19 June, organisations subject to the UK GDPR will need to update their privacy notices and introduce formal data protection complaint-handling processes that meet specific legal requirements.








