DUAA Compliance

DUAA compliance for UK small businesses

The fastest practical DUAA action is a clear data protection complaints process: public website wording, an internal procedure, acknowledgement and outcome templates, and an evidence log.

National hub

UK businesses

Public route
Internal procedure
Complaint log
Ready to publish

What to do first

Put the complaints process where people can find it

A privacy policy is useful, but the immediate conversion and compliance opportunity is a clear page or policy section explaining how data protection complaints are received, acknowledged, investigated, updated, and closed.

Website complaints wording

Privacy policy addendum

Internal procedure

Acknowledgement email

Outcome email

Complaint log CSV