Data Protection Complaints
The Data (Use and Access) Act 2025 (DUAA) is defined as primary legislation that amends the Data Protection Act 2018 and UK GDPR, introducing new obligations across data use, access, and governance in the United Kingdom. Section 103 inserts a new section 164A into the Data Protection Act 2018, creating a formal statutory complaints mechanism for the first time.
If an individual considers that PAM Group have infringed data protection legislation because of the way we have handled their personal information (or the personal information of someone they’re acting on behalf of), they can complain to us by completing the form below:
Data Protection Complaint Form
The data being asked for will be submitted directly to the DP Complaints inbox. We will acknowledge receipt within 30 calendar days in accordance with legislation and will investigate to ensure that the submission is a data protection complaint and will confirm if it does or does not reach the parameter’s of a Data Protection Complaint.
For example, an individual may submit complaints about:
- the way we’ve responded to their subject access request (SAR), or other rights request.
- the security measures we’ve used to store their information (e.g. someone who has been impacted by a data breach, regardless of whether it’s reportable to the ICO); or
- how PAM have collected or used their personal information (e.g. where we’ve stored it, how long we’ve kept it for, or its accuracy).
Sometimes people may complain about our service or other matters, whilst also exercising their data protection rights. This doesn’t count as a data protection complaint. For example:
- an employee may raise a grievance issue, and also request copies of their personal information; or
- a person may complain about a customer service issue and also request that we delete their information.
How we make a difference
About us
Occupational Health
Our Accreditations
