Guides › Banking Scams and Fraud › What Does the ICO Do for Consumers?
What Does the ICO Do for Consumers?
The Information Commissioner's Office (ICO) is where you can complain if an organisation has not kept your information safe, has not answered a request for your data, or keeps sending marketing after you opted out. You usually need to complain to the organisation first.
At a Glance
Your Rights
What the rules say, with a link to the official source for each.
The Short Answer
Data Breaches
You can complain to the ICO if an organisation hasn't kept your information safe; give the organisation a chance to respond first. source
Data Requests
If an organisation does not respond to your subject access request within one month, follow up and complain to it, then complain to the ICO within three months of your last meaningful contact. source
Marketing
Organisations must stop marketing emails once you opt out. If they continue, you can complain to the ICO. source
Time Limits to Know
Miss a deadline and you can lose a right. Check the dates on your own paperwork.
- 3 monthsComplain to the ICO about a data requestFrom your last meaningful contact
Steps to Take
Step 1 of 3
Complain to the organisation first, in writing.
Step 2 of 3
Keep copies and dates.
Step 3 of 3
Use the ICO's online complaint forms.
(Tap the numbers to reveal steps)
Where to Go If It Is Not Put Right
Your options, in order, and when each one applies.
The Organisation
Complain here first.
Information Commissioner's Office
If the organisation does not put it right.
Want Help?
If you would like one of our team to look at your problem, our initial case review is free. We cannot guarantee any outcome and we do not give legal advice.
Lead reviewer
Luke Marley
Founder and Lead Reviewer
Luke founded CPUK in 2026 after seeing how hard it is for ordinary people to get problems with companies put right. He oversees our guides and checks them against official sources.
Research by Katie Burt, Co-founder and Operations Lead (17 years in the care sector, including managing services for vulnerable adults), and the CPUK Research Team. Researched with AI-assisted research tools, then checked and corrected by our team.
Last checked: 13 October 2026. We are not paid by the companies we write about. Adverts never affect our guidance. Read our editorial policy.
Sources and official links
- ico.org.uk/for-the-public/i-m-worried-an-organisation-hasn-t-kept-my-information-safe-what-should-i-do/what-steps-can-i-take-if-i-ve-been-affected-by-a-personal-data-breach Checked 13 October 2026
- ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request/what-to-do-if-you-dont-get-a-response-or-youre-unhappy-with-it Checked 13 October 2026
- ico.org.uk/for-the-public/online/spam-emails Checked 13 October 2026
- ico.org.uk Checked 8 October 2026