Skip to main content

Read the latest service updates

Data Protection Complaints

Make a data protection complaint to Powys Teaching Health Board

 

The Data (Use and Access) Act 2025 (DUAA) amends, but does not replace, the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA) and the Privacy and Electronic Communications Regulations (PECR). Section 103 of the DUAA requires Powys Teaching Health Board (PTHB) to take steps to enable individuals (data subjects) to make complaints about how we handle their personal information.

Individuals must now first raise their complaint with the health board, before escalating it to the Information Commissioner's Office (ICO).

PTHB wants to ensure any complaints are dealt with efficiently and quickly. We use this opportunity to rectify any mistakes that have been made to improve our quality of work.

You have the right to complain to the health board if you think it has not handled personal information responsibly and in line with good practice, such as where you:

  • are unhappy with your response to a subject access request (SAR), or other rights request
  • have been impacted by a data breach by the health board
  • are unhappy about the way we have used your personal information (for example where we store it, how long we have kept it for, or its accuracy).

 

How to make a data protection complaint

You’ll need to provide the following information when making a complaint about the handling of your personal data:

  • your name
  • your address (email or physical address where you wish to receive your response)
  • details of the issue you wish to complain about.

When we receive your complaint we will ask you for proof of identity as part of our acknowledgement to allow us to formally look into your concern or complaint. Please note that we will take every feasible measure to ensure your identification is securely destroyed once verified.

 

Submit your complaint

You can make a complaint in one of the following ways:

 

Email

You can email us at PTHB.DPO@wales.nhs.uk

 

In writing

Data Protection Officer

Information Governance
Glasbury House
Bronllys Hospital
Brecon
Powys
LD3 0LY

 

Time Period

In line with ICO guidance the health board will:

  • acknowledge receipt of complaints within 30 days of receiving them
  • without undue delay, take appropriate steps to respond to complaints, including making appropriate enquiries, and will keep you informed
  • without undue delay, tell you the outcome of your complaint.

 

What if I am unhappy with the reply?

The ICO is responsible for making sure that organisations behave in accordance with the Data Protection Act.

If you are not happy with our reply, you can complain directly to the ICO (opens in new tab). The ICO will investigate your complaint further.

 

 

 

 
Connect: