What You Need To Know About The GDPR 2026 Update

On 19th June 2026 there was an update to GDPR regulations outlining a new requirement for data complaints handling.

This GDPR 2026 update makes it compulsory for all businesses to have a process in place for handling data protection complaints. This isn’t something you can opt out of – it’s now a legal requirement (just another to add to the list of things we have to manage as solo business owners!).

Of course, having the system in place is one thing – the second is that you need to include that complaints procedure on your website somewhere – the most sensible place would be in your privacy policy.

As always, there’s no gatekeeping here, so here’s a draft I’ve put together, which to the best of my knowledge, fulfils the requirements (but this is not a guarantee – I am not a GDPR expert).

Example policy & wording for Privacy Policy, following GDPR 2026 Update

How to Make a Data Protection Complaint

We are committed to protecting your personal information. However, if you have any concerns or wish to make a complaint about how we have handled your data, please contact us first using the following details so we can investigate your concern(s):

• Email: [Insert your dedicated data protection email address]
• Postal Address: [Insert your full postal address]
• Telephone: [Insert your phone number]

What to Expect

When you submit a data protection complaint, we will handle it in accordance with the Data Protection Act and GDPR. You can expect the following:

1. Acknowledgement: We will acknowledge receipt of your complaint within 30 days.
2. Investigation: We will investigate your concern(s) without undue delay and keep you informed of our progress.
3. Outcome: Once our investigation is complete, we will explain our findings and what we have done (or will do) to resolve your complaint.

Your Right to Complain to a Supervisory Authority

While we hope to resolve any concerns you have directly, you also have the right to lodge a complaint about our data processing activities with a supervisory authority.

In the UK, the supervisory authority is the Information Commissioner’s Office (ICO). You can contact the ICO directly by calling their helpline at 0303 123 1113 or by using their Make a Complaint about an Organisation tool.

If you feel confident editing your website, go and add this, or something similar that fulfils the requirements, now. If you need help editing your privacy policy – you can send me a message here and I will update it for you, for £15 cold hard cash (not really – bank transfer is the way you’ll need to pay me).

The post What You Need To Know About The GDPR 2026 Update appeared first on Goldfinch Marketing.