Data Protection Complaint Final Response 
This Data Protection Complaint Final Response Letter is designed for use where an organisation has completed its investigation into a complaint about the handling of personal data.
The letter helps you explain what complaint was considered, what investigation was carried out, what outcome has been reached, and what action has been or will be taken.
Note: While structured as a letter, this template can be easily adapted for use as an email or direct message response.
When Should This Letter Be Used?
This letter should be used after you have investigated a data protection complaint and are ready to provide the complainant with your final response.
It is suitable for use where a complaint has been upheld, partially upheld, or not upheld. It may also be used where you have agreed to take remedial action, where no further action is required, or where the complainant should be informed about review, clarification, or ICO complaint options.
What Does This Letter Cover?
This Data Protection Complaint Final Response Letter helps you provide a clear outcome at the end of a personal data complaint investigation, including:
- confirmation that the investigation has been completed
- a summary of the complaint considered
- a brief explanation of the investigation carried out
- the outcome of the complaint
- reasons for upholding, partially upholding, or not upholding the complaint
- details of any action taken or proposed
- optional wording where no further action is required
- optional wording for apologies or acknowledgement of dissatisfaction
- optional review or clarification wording
- the complainant’s right to complain to the Information Commissioner’s Office
Legal and Compliant
This Data Protection Complaint Final Response Letter is designed to support compliance with UK data protection law, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
It helps you provide a clear and accountable response to a data protection complaint, explain the outcome of your investigation, record any remedial action, and inform the complainant of their right to complain to the ICO if they remain dissatisfied.
How Should This Template Be Used?
This letter should be adapted to include your organisation’s name, contact details, complaint reference, summary of the complaint, investigation steps, outcome, reasons, and any action taken or proposed.
Where you have an internal review or clarification process, you should include the optional review wording and explain how the complainant can ask for the outcome to be reviewed or clarified. You should not suggest that the complainant must use an internal review process before complaining to the ICO.
Once you have purchased access to the appropriate document folder click on the “Download Document” link below. You will be asked what you want to do with the file. It is recommended that you save the document to a location of your choice prior to viewing.
Data Protection Complaint Final Response is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.