Section 177: Guidance about how to seek redress against media organisations

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 6: Enforcement

The Commissioner must produce and publish guidance about the steps that may be taken where an individual considers that a media organisation is failing or has failed to comply with the data protection legislation.

In this section, "media organisation" means a body or other organisation whose activities consist of or include journalism.

The guidance must include provision about relevant complaints procedures, including—

who runs them,
what can be complained about, and
how to make a complaint.

For the purposes of subsection (3), relevant complaints procedures include procedures for making complaints to the Commissioner, the Office of Communications, the British Broadcasting Corporation and other persons who produce or enforce codes of practice for media organisations.

The guidance must also include provision about—

the powers available to the Commissioner in relation to a failure to comply with the data protection legislation,
when a claim in respect of such a failure may be made before a court and how to make such a claim,
alternative dispute resolution procedures,
the rights of bodies and other organisations to make complaints and claims on behalf of data subjects, and
the Commissioner's power to provide assistance in special purpose proceedings.

The Commissioner—

may alter or replace the guidance, and
must publish any altered or replacement guidance.

The Commissioner must produce and publish the first guidance under this section before the end of the period of 1 year beginning when this Act is passed.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.