IN FORCE SINCE 19 JUNE 2026
Privacy complaint checks
Visitors should be able to find out how to raise a data-protection concern. Public information is only one part of readiness.
What the public scan looks for
We follow linked privacy-related pages and look for contextual complaints information and a contact mechanism. A contact route is reported as observed, not assumed to have a working internal workflow.
What you need to confirm
The owner questionnaire asks about 30-day acknowledgement, investigation, outcome communication and the recipient responsible for incoming concerns. These answers are labelled as self-reported.
A practical preparation checklist
Check the published contact address, who receives it and who covers absence. Keep a record of incoming complaints and updates. Distinguish acknowledgement from resolution: the 30-day requirement concerns acknowledging receipt, while investigation and response must proceed without undue delay.
No fake complaints
GDPRFix does not submit complaint forms or send test complaints. “No clear route detected” is a prompt to review the website and wider process, not a finding that the organisation has broken the law.