Next Steps
If you remain dissatisfied with the university's final response, you may escalate your concerns to the Information Commissioner's Office (ICO). You can do this via the ICO's official website.
Leeds Beckett University - City Campus,
Woodhouse Lane,
LS1 3HE
Data Protection Complaints procedure
The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), Data Use and Access Act (DUAA) and the Privacy and Electronic Communications Regulations (PECR) (together, the Data Protection Legislation), provide individuals with rights relating to how organisations process their personal data.
If you have concerns about the university's handling of personal data, you may raise a complaint under this Data Protection Complaints procedure.
-
Scope
Complaints may be submitted regarding any aspect of the university's processing of personal data including but not limited to:
- University's response to individual's rights requests, such as Subject Access Requests, requests for data erasure
- The handling of personal data disclosed to or requested by third parties such as police, local authorities
- The use of personal data for direct marketing and/or profiling activities
- Any other concerns relating to the university's compliance with Data Protection Legislation
Complaints may also be submitted by third parties acting on behalf of an individual or in response to a data-related request.
-
Procedure
All complaints should be directed to the university's Information Governance Team in the first instance (infocompliance@leedsbeckett.ac.uk).
If you remain dissatisfied with the response, then may escalate your complaint to the Data Protection Office at dpo@leedsbeckett.ac.uk.
When submitting a complaint or escalating an existing one, please include:
- Your name and contact details
- A clear and detailed description of your concern
- Relevant dates and supporting evidence (where available)
- The outcome you are seeking
-
Investigation and complaint outcome
- The Information Governance Office will acknowledge your complaint and appoint an investigator. In most cases, this will be the university's Data Protection Officer, unless a conflict of interest arises. In such instance, an appropriate investigator would be appointed by the Deputy University Secretary
- Additional information may be requested to support the investigation
- The investigator will review the issues raised, which may include speaking with individuals referenced in the complaint, liaising with external organisations, and reviewing relevant documentation and information
- Where the investigation overlaps with other university procedures, the investigator will work with the relevant department to ensure that the Data Protection complaint is progressed without causing delay to other processes
- You will receive a written outcome letter, setting out the findings and any actions taken, within one calendar month of the university receiving the complaint
