Data Protection Complaints Procedure
Data Protection Complaints Procedure
Introduction:
- This procedure explains how individualscan make a complaint about the way Hundred Court Chambers has handled theirpersonal data, what information we may need to investigate the complaint, and when theycan expect a response.
- Hundred Court Chambers is committed tohandling personal data lawfully, fairly, securely and transparently. This procedure providesa clear route for individuals to raise data protection complaints with us.
- Hundred Court Chambers is required tohave a data protection complaints procedure as set out in the Data (Use and Access) Act2025, which amended the UK GDPR and the Data Protection Act 2018. Thisrequirement came into force on 19 June 2026.
When to use this procedure:
This procedure should be used where anindividual has a Data Protection Complaint (DPC) and believes that Hundred CourtChambers may have infringed data protection legislation in the way we have collected,used, stored, shared, retained, protected, or otherwise handled their personal data,or the personal data of someone they are authorised to act for.
How to Make a Data Protection Complaint:
- How Hundred Court Chambers responded to arequest made under the Data Protection Act 2018, including requests for access,rectification, erasure, restriction, objection, portability, or other applicable dataprotection rights.
- Concerns about the security measures usedto protect personal data, including concerns arising from an actual orsuspected data breach.
- How Hundred Court Chambers collected,used, shared, stored, retained, or deleted personal data.
- Concerns about the accuracy of personaldata Hundred Court Chambers holds.
- Any other matter relating to HundredCourt Chambers compliance with data protection legislation.
What this procedure covers:
Making a complaint:
Hundred Court Chambers will only considera DPC received within six months of the matter complained about. Complaintsreceived outside this period will only be considered in exceptional circumstances,for example where the complainant became aware of the matter more than sixmonths after it occurred.
Time limits:
A DPC can be made by email to our Chambers’Director using the email address nicholas.oneill@hundredcourt.co.uk, or inwriting addressed to:
17th of July 2026
Please provide as much detail as possibleso that we can understand and investigate the complaint. This should include yourname and contact details, a description of the issue, relevant dates, copies ofcorrespondence, reference numbers, the personal data involved, and the outcomesought.
The Chambers’ Director
Hundred Court Chambers
Exchange Station
Tithebarn Street
L2 2QP
- Hundred Court Chambers may need to asksomeone who has made a complaint for proof of identity before we can proceed. If proofof identity is required, we will ask for it at the earliest opportunity.
- A DPC may be made by someone acting onbehalf of another person, such as a family member, solicitor, representative,advocate, or relevant not-for-profit organisation. In these cases, Hundred CourtChambers will check that the person making the complaint is authorised to act on theother person’s behalf. This may require evidence such as: o an appropriate power of attorney; or o a signed letter of authority from theperson they are acting on behalf of.
- In the absence of appropriate evidence, HundredCourt Chambers will not investigate the complaint.
Supporting information required to investigate a complaint:
- Hundred Court Chambers will aim toacknowledge receipt of a DPC received within 5 working days.
- We will then aim to investigate the DPCand provide an outcome within one calendar month. However, complex complaintsmay take longer to resolve. If additional time is needed, we will tell thecomplainant.
- When necessary, Hundred Court Chamberswill request additional information or clarification to ensure our substantiveresponse is complete.
- We will keep the person who has made thecomplaint updated on the progress of the investigation where we can.
Acknowledgement and Investigation:
- We will provide the complainant with theoutcome of the DPC without undue delay once the investigation is complete. Theresponse will explain, where appropriate, what we investigated, our findings, whetherwe uphold the complaint in whole or in part, any action we will take, and anyfurther steps available to the complainant.
- Where a DPC is upheld, possible actionsmay include correcting inaccurate data, completing or revisiting a data protectionrequest, improving security measures, changing internal processes, providingfurther explanation, offering an apology, updating records, or taking otherappropriate remedial action
Outcome and possible remedies:
Escalation to the Information Commissioner’s Office:
If the complainant remains dissatisfiedafter receiving our response, or believes Hundred Court Chambers has not handled the original DPCappropriately, they may raise the matter with the Information Commissioner’sOffice, the UK regulator for data protection and information rights:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: https://ico.org.uk/make-a-complaint/
Telephone: +44 (0) 303 123 1113
We will keep appropriate records of eachDPC, including the issues raised, steps taken, decisions made, communications withthe complainant, and any remedial actions. We will use complaints to identifylessons learned, improve our handling of personal data and strengthen dataprotection governance.
Record Keeping and Learning:
This procedure will be reviewedperiodically and updated where required to reflect changes in data protection law, regulatoryguidance, organisational structure, or operational practice.



