Handling Data Protection Complaints Under DUAA 2025 - Compliance in Bitesize for Law Firms

Introduction

The Data (Use and Access) Act 2025 (DUAA) marks a significant shift in how organisations must handle data protection complaints. What was once considered good practice is now a clear statutory obligation.

For law firms, this goes beyond data protection compliance alone. The way complaints are identified, managed and resolved now directly engages SRA Principles, Code of Conduct obligations and Law Society quality standards, including Lexcel and CQS.

This focused 30-minute webinar provides a practical overview of the new requirements, how they interact with UK GDPR and what firms need to do to ensure their approach is compliant, consistent and defensible.

Designed for COLPs, MLROs, compliance professionals, partners, senior management and DPOs, this webinar highlights what ‘good’ looks like in practice - helping firms take proportionate, effective steps to reduce risk and meet regulatory expectations with confidence.

What You Will Learn

By the end of this short webinar, you will:

• Understand the key changes introduced by the DUAA 2025
• Recognise how data protection complaints engage SRA regulatory obligations
• Understand how complaints handling aligns with Lexcel and CQS requirements
• Identify what constitutes a data protection complaint in practice
• Implement a compliant complaints handling process
• Understand the regulatory, legal and reputational risks of poor handling

This pre-recorded webinar will be available to view from Wednesday 1st July 2026

Alternatively, you can gain access to this webinar and 2,400+ others via the MBL Webinar Subscription. Please email webinarsubscription@mblseminars.com for more details.