[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSrSqIbLzPMo-0oMKPVmDOtmADVJ6HmYlG-E0c905szk":3,"faq-section-":67},{"tableOfContents":4,"markDownContent":5,"htmlContent":6,"metaTitle":7,"metaDescription":8,"wordCount":9,"readTime":10,"title":11,"nbDownloads":12,"excerpt":13,"lang":14,"url":15,"intro":16,"featured":4,"state":17,"author":18,"authorId":19,"datePublication":23,"dateCreation":24,"dateUpdate":25,"mainCategory":26,"categories":46,"metaDatas":52,"imageUrl":57,"imageThumbUrls":58,"id":66},false,"On **23 June 2026 at 1:00 PM BST**, a significant requirement of the **UK Data (Use and Access) Act (DUAA)** came into force — and many organisations were still not fully prepared.\n\nFor the first time, controllers will need to have a **formal and operational complaints procedure** in place.\n\nThis marks a shift from accountability on paper to accountability in practice — and the gap between the two is often where risk sits.\n\nDuring the session, we unpacked:\n\n➡️ **What the DUAA complaints requirement means** and why it matters\n\n➡️ **How organisations are preparing** their processes for the new requirement\n\n➡️ **Where compliance gaps typically arise** and how to close them\n\n➡️ **How to operationalise complaints handling** through workflows, governance and clear accountability\n\n➡️ **Real practitioner insights** on managing complaints at scale\n\n### 🎙️ Speakers\n\n- **Steve Wright** — Founder & CEO, PICCASO *(Moderator)*\n- **Barry Gibbon** — Group Head of Privacy & Data Protection, Cantor Fitzgerald\n- **Charlie Gretton** — National Account Executive, Dastra\n- **Janine McKelvey** — General Counsel, Privacy & Ethics Officer, BT\n\nOrganisations without a clear complaints process, acknowledgement mechanism or governance framework in place may already be creating unnecessary compliance risk.\n\nIf you are a **DPO, compliance lead or privacy professional** working through what the DUAA complaints mean for your organisation, this session is designed for you.","\u003Cp>On \u003Cstrong>23 June 2026 at 1:00 PM BST\u003C/strong>, a significant requirement of the \u003Cstrong>UK Data (Use and Access) Act (DUAA)\u003C/strong> came into force — and many organisations were still not fully prepared.\u003C/p>\n\u003Cp>For the first time, controllers will need to have a \u003Cstrong>formal and operational complaints procedure\u003C/strong> in place.\u003C/p>\n\u003Cp>This marks a shift from accountability on paper to accountability in practice — and the gap between the two is often where risk sits.\u003C/p>\n\u003Cp>During the session, we unpacked:\u003C/p>\n\u003Cp>➡️ \u003Cstrong>What the DUAA complaints requirement means\u003C/strong> and why it matters\u003C/p>\n\u003Cp>➡️ \u003Cstrong>How organisations are preparing\u003C/strong> their processes for the new requirement\u003C/p>\n\u003Cp>➡️ \u003Cstrong>Where compliance gaps typically arise\u003C/strong> and how to close them\u003C/p>\n\u003Cp>➡️ \u003Cstrong>How to operationalise complaints handling\u003C/strong> through workflows, governance and clear accountability\u003C/p>\n\u003Cp>➡️ \u003Cstrong>Real practitioner insights\u003C/strong> on managing complaints at scale\u003C/p>\n\u003Ch3 id=\"speakers\">🎙️ Speakers\u003C/h3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Steve Wright\u003C/strong> — Founder & CEO, PICCASO \u003Cem>(Moderator)\u003C/em>\u003C/li>\n\u003Cli>\u003Cstrong>Barry Gibbon\u003C/strong> — Group Head of Privacy & Data Protection, Cantor Fitzgerald\u003C/li>\n\u003Cli>\u003Cstrong>Charlie Gretton\u003C/strong> — National Account Executive, Dastra\u003C/li>\n\u003Cli>\u003Cstrong>Janine McKelvey\u003C/strong> — General Counsel, Privacy & Ethics Officer, BT\u003C/li>\n\u003C/ul>\n\u003Cp>Organisations without a clear complaints process, acknowledgement mechanism or governance framework in place may already be creating unnecessary compliance risk.\u003C/p>\n\u003Cp>If you are a \u003Cstrong>DPO, compliance lead or privacy professional\u003C/strong> working through what the DUAA complaints mean for your organisation, this session is designed for you.\u003C/p>\n","UK DUAA Complaints: 2026 Requirements in Practice","Watch privacy leaders from BT, Cantor Fitzgerald, PICCASO and Dastra explain how to operationalise the UK DUAA’s new data protection complaints duties.",213,2,"UK DUAA Complaints: Meeting the 2026 Requirements in Practice",0,null,"en","meeting-the-2026-deadline-in-practice","The Data (Use and Access) Act 2025 (DUAA) has introduced new legal duties for organisations handling data protection complaints in the UK. Controllers must now provide a clear way for individuals to raise complaints, acknowledge them within 30 days, investigate appropriately and communicate the outcome without undue delay.\n\nBut what does effective compliance look like in practice?\n\nIn this on-demand webinar, privacy leaders from BT, Cantor Fitzgerald, PICCASO and Dastra explore how organisations can turn the DUAA requirements into operational processes. From complaint intake and acknowledgement to workflows, governance and accountability, discover the practical steps privacy teams can take to identify compliance gaps and manage complaints effectively at scale.","Published",{"id":19,"displayName":20,"avatarUrl":13,"bio":13,"blogUrl":13,"color":13,"userId":21,"creationDate":22},25699,"Zelie Aderic",28682,"2026-08-06T20:46:39.3043599","2026-08-21T11:53:00","2026-08-21T11:53:17.4233545","2026-08-26T08:57:33.4543241",{"id":27,"name":28,"description":29,"url":30,"color":31,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":32,"translations":33},26,"Webinars","Every Dastra's webinars with our privacy experts","webinar","#2fe48d",30,[34,38,42],{"lang":35,"name":36,"description":37},"fr","Webinaires","Retrouvez l'intégralité des webinaires de Dastra avec nos experts RGPD",{"lang":39,"name":40,"description":41},"de","Webinare","Finden Sie die vollständige Reihe der Webinare von Dastra mit unseren DSGVO-Experten",{"lang":43,"name":44,"description":45},"es","Webinarios","Encuentra la totalidad de los seminarios web de Dastra con nuestros expertos en Privacy",[47],{"id":27,"name":28,"description":29,"url":30,"color":31,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":32,"translations":48},[49,50,51],{"lang":35,"name":36,"description":37},{"lang":39,"name":40,"description":41},{"lang":43,"name":44,"description":45},[53],{"typeMetaDataId":54,"value":55,"id":56},5,"https://www.youtube.com/embed/96cXhq03JVA?si=bgSEQuaeopR7n4ms",117982,"https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-original.jpg",[59,60,61,62,63,64,65],"https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-1000.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-1500.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-800.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-600.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-300.webp","https://static.dastra.eu/content/3534fa1d-c34a-47d4-a142-1f9bf8306bfb/replay-webinar-23-juin-100.webp",60503,[]]