If you have concerns about how your personal data has been processed by the Council, this page explains how to raise your concern with us.
Data protection complaints are not processed under the corporate complaints process. The Council’s Data Protection Officer (‘DPO’) is tasked with monitoring compliance with the UK GDPR and other data protection law, and this includes investigating complaints. The DPO is also the Council’s point of contact with the regulator (the Information Commissioner) who the data subject can engage with if they remain dissatisfied.
What is a data protection complaint?
You can raise a complaint if you are concerned about the way in which your personal data has been handled. Concerns could include:
- how your personal information has been processed. This includes how it is collected, used, shared or stored
- delays or other issues in relation to your Subject Access Request or other rights requests
- concerns about the accuracy of the information we hold about you or, or how long we keep it
- concerns about whether there may have been a data breach of your personal data or a security issue affecting your data
- concerns about profiling or automated decision making (although we do not do profiling and do very little automated decision making under the GDPR definition)
What is not a data protection complaint?
- general service complaints
- complaints about delays or dissatisfaction with a service
For more information on these other types of complaints, you can submit your complaint online.
How to make a complaint
You can raise your concern in the following ways:
- contact the Data Protection Officer at email dpo@lbbd.gov.uk
- post to the address of FAO Data Protection Officer, Barking Town Hall, 1 Town Square, Barking, IG11 7LU
- the quickest, and environmentally friendly way to raise a concern is to submit it electronically. We will respond to your concern by email, unless you specify otherwise
- if you do write to us by post, please include an email address, so that we can email our response to you
We need:
- your name and contact details
- state what your concern is
- the date when the issue occurred
- anything that helps us understand and look into the issue (e.g., reference numbers or evidence)
When you raise a concern, we will send you a confirmation with a reference number. The law says that we must acknowledge your complaint within 30 days but we will usually acknowledge within 5 working days.
Investigating your concerns
We will:
- review your concern and the information you have provided to us
- contact you should we require further information from you
- look into your concern and make necessary enquiries
- endeavour to reply to you without undue delay
- and if possible, resolve your concern. If we find that the council has acted correctly, we will explain why
Outcome
When our investigation is complete, we will explain:
- what we looked at
- how we investigated
- what we found
- what action, if any, we have taken or will take
Please note: Responses to any SAR complaints will initially be provided by the appropriate Team dealing with SAR requests.
If you remain unhappy
If you are not satisfied with our response, you can raise your concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator. Details of how to contact the ICO will be provided in our response to you.