On 19 June 2026, Section 164A of the Data Protection Act 2018 introduced a formalised framework for how organisations, including schools, must handle data protection complaints. While the statutory requirements themselves are relatively procedural in nature, their interaction with existing school complaints frameworks, particularly the ISSR Part 7 parental complaints procedure, raises important practical questions.
In this article, we set out our view on how academies can most effectively manage these overlapping regimes, ensuring compliance while preserving fairness and operational efficiency.