Personal Data Protection Act 2010 · Updated to 15 Sep 2026 · Part VIII · Inspection, Complaint and Investigation
104. Complaint
Feedback & supportAny individual or relevant person may make a complaint in writing to the Commissioner about an act, practice or request—
relevant person
“relevant person”, in relation to a data subject, howsoever described, means— (a) in the case of a data subject who is below the age of eighteen years, the parent, guardian or person who has parental responsibility for the data subject; Personal Data Protection 15 (b) in the case of a data subject who is incapable of managing his own affairs, a person who is appointed by a court to manage those affairs, or a person authorized in writing by the data subject to act on behalf of the data subject; or (c) in any other case, a person authorized in writing by the data subject to make a data access request, data correction request, or both such requests, on behalf of the data subject;
specified in the complaint;
that has been done or engaged in, or is being done or engaged in, by the data controller specified in the complaint;
that relates to personal data of which the individual is the data subject; and
personal data
“personal data” means any information in respect of commercial transactions, which— (a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose; (b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010;
that may be a contravention of the provisions of this Act, including any codes of practice.
this Act
“this Act” includes regulations, orders, notifications and other subsidiary legislation made under this Act;