New Data Protection obligations for employers

 On 19 June 2026, the final part of the Data (Use and Access) Act 2025, came into force.  It provides a statutory right for employees to raise complaints with their employer rather than involving the Information Commissioner’s Office (ICO), in the first instance. Employers must be able to demonstrate that they have an effective mechanism for investigating and resolving complaints.  The ICO has published guidance on compliance.