What data protection matters can I complain about?
You may make a data protection complaint in respect of how BSO handles your personal information if you consider that BSO:
• Has not properly responded to your subject access requests
• Is not keeping information secure
• Holds inaccurate information about you
• Has disclosed information about you
• Is keeping information about you for longer than necessary
• Has collected information for one reason and is using it for something else; or
• Has not upheld any of your data protection rights
As BSO acts as a data processor on behalf of other HSC organisations your complaint may be directed to those organisations.
How can I make a data protection complaint?
Please use our data protection complaint form to submit your complaint: Data Protection Complaint Form – Business Services Organisation (BSO) Website.
Alternatively, you may contact us via email: dpa.bso@hscni.net or by writing to:
Data Protection Complaints
Business Services Organisation
2 Franklin Street
Belfast
BT2 8DQ
Time limits for making a complaint
There are no statutory time limits to make a data protection complaint. It is, however, important to make your data protection compliant as a soon as possible.
When happens when you submit a complaint?
In accordance with its statutory obligations, BSO will acknowledge receipt of your complaint within 30 days of receipt. BSO will then investigate and respond to your complaint without undue delay and usually within 30 days of having issued an initial acknowledgement to you. BSO will keep you informed through the investigation process and will let you know if we encounter any delays in investigating and responding to your complaint.
What happens if you disagree with the response provided?
If you are not happy with the outcome of your data protection complaint then you may complain to the Information Commissioner via https://ico.org.uk/make-a-complaint/data-protection-complaints/If you have any concerns about BSO’s processing of your personal data, you can make a complaint to us using our data protection complaints form: Data Protection Complaint Form | BSO People & Place Web Portal or via email to dpo.bso@hscni.net. Please do not send subject access requests to this email address.
If you remain unhappy with how BSO has processed your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint