Data protection complaints
You may be unhappy with how we have collected, used, shared, stored or otherwise handled your personal information. If so, you have the right to make a data protection complaint to the Council.
A data protection complaint may relate to matters such as
- how your personal information has been used or shared
- concerns about the accuracy of your personal information
- how long we keep your information for
- concerns about the security of your information
- how we have handled your subject access request or any other UK GDPR rights requests
- concerns following a personal data breach affecting you.
You do not need to quote data protection law or use legal language when making your complaint. If it is clear that you are unhappy about how your personal information has been handled, we will treat this as a data protection complaint. We will also make sure it is considered by the appropriate team.
How to make a data protection complaint
You can make a data protection complaint by emailing our Information Governance Unit at information.compliance@edinburgh.gov.uk or using our online form.
When contacting us, it will help if you tell us
- What has happened.
- Why you believe there is a problem with how your personal information has been handled.
- What service area is involved, if known.
- What outcome you are seeking.
Make a data protection complaint online
What happens next
We will
- acknowledge your complaint within one month of receiving it
- take appropriate steps to look into the matter without undue delay
- keep you informed where appropriate while we are considering your complaint
- tell you the outcome of your complaint.
If you are dissatisfied
We hope to resolve your concerns directly. However, if you are dissatisfied after receiving our response, you can complain to the Information Commissioner's Office (ICO), which is the UK regulator for data protection.< /p>
Read about how to complain to the ICO on their website.