Your right to make a data protection complaint
Under Data Protection Legislation, individuals have a right to make a complaint if they have concerns about how the University has handled, shared or processed their personal data.
Data Protection complaints are handled by the Information Compliance Team.
Making a complaint
To make a data protection complaint, please complete this form:
If you would prefer, you can make a complaint via email or post. Please write to:
Information Compliance Team
University of Westminster
3rd floor
32–38 Wells Street
London
W1T 3UW
The University holds and processes a significant amount of personal data in a wide variety of systems across the organisation. It is important that you provide as much information as possible when you raise your complaint.
You should raise your complaint at the earliest opportunity and within three months of the occurrence of the matter the complaint is about or within three months of you being notified of a data breach.
Upon receiving a complaint, we will check the details of the complaint and may request further information. In some cases, we may request proof of identity.
We will investigate each complaint individually. We will determine the most appropriate way in which to undertake the investigation considering the nature, seriousness and sensitivity of the complaint.
The time we require to consider a complaint will depend on its nature and complexity. We aim to respond to complaints within one month but complex complaints may take up to three months. We will inform you if we consider your complaint to be complex.
Data Protection Complaints Policy and Procedure
The process of how the University of Westminster handles complaints can be found in the Data Protection Complaints Policy and Procedure below.
Advice from the Information Commission
For further information and advice about how to make a data protection complaint to an organisation, please see further guidance from the Information Commission.