Data breach disputes

When a company loses control of your personal data, UK GDPR gives you rights it cannot contract away: to be told without undue delay where the breach is likely to put you at high risk (Article 34), to see what was taken, to complain to the Information Commission (formerly the ICO), and to claim compensation for material and non-material damage. These guides cover the routes.

Your rights when your bank is hacked

UK GDPR compensation rights, Information Commission complaints, the FCA's security expectations for banks, and the deadlines that apply at each step.

Related reading

Fraud and scam disputes

If the breach led to money leaving your account, the fraud reimbursement rules may apply too, depending on how the payment was made.

Check the company

Look up the company's complaint route, regulator and track record before you write.