Solo wellbeing practices now need a written process for data complaints, deadline included

In 2026 the ICO announced that from 19 June, every UK organisation handling personal data, however small, must have a formal complaints process for data protection issues. This includes practices like yours, whether you've got a receptionist or just a diary and good intentions.

Page updated: 13 Aug 2026

Whole-practice growth for wellness practices. Rooted in Wiltshire, UK, working worldwide.

Practices still handling data complaints by email and hoping for the best now have a fixed date to sort that out, and no size exemption to hide behind.

Original Research	The ICO's countdown notice flagging a new legal duty to handle data complaints properly
Source	https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/one-month-to-go-what-businesses-need-to-know-to-meet-new-data-law/
Overview	A government press release marking one month until the Data (Use and Access) Act 2025 makes formal complaints procedures a legal requirement, published by the UK's data protection regulator.
Year	2026
Publisher	Government, Information Commissioner's Office (ICO)
Relevance to Wellbeing	Directly and urgently applicable to every UK wellbeing practice regardless of size or type, since the law covers anyone handling personal data, not just larger organisations.
Our Verdict	Too early to tell the deadline is real and worth acting on, but the notice itself offers no study or figures behind it, just a warning.
Our Summary	The deadline is genuine and comes from the regulator itself, not a rumour doing the rounds. There's no methodology, sample, or figures attached, it's an announcement, not research. It applies equally to sole practitioners and larger centres, so nobody can argue they're too small to bother. How many practices are actually unprepared isn't stated anywhere, that number simply doesn't exist yet.
Our Geo View	Applies only to UK-based practices and anyone handling data belonging to UK residents; not relevant to practices operating solely outside the UK.

Abstract of wellbeing niches and revenue flow

Recognise how this might impact your practice

Why this might matter to you

Coaching: this matters because coaches keeping client notes in a personal inbox may find that no longer counts as a system, just a gap waiting to be found.
Therapy: this matters because therapists hold some of the most sensitive data around, and clients notice a vague or slow reply to a concern.
Training: this matters because trainers holding booking and health information for classes need somewhere for a complaint to actually go.
Alternative Healing: this matters because healers collecting client health histories are still bound by the same law as everyone else, whatever the treatment involves.
Clinical: this matters because clinics already managing health records now need a formal complaints trail sitting alongside everything else.
Retreat/Centre: this matters because centres holding guest details across bookings, diets, and health notes have more at stake if a complaint disappears into nothing.

Where this came from

An ICO press release marking one month until businesses must have a formal data complaints process in place, ahead of the Data (Use and Access) Act 2025 taking effect.

Information Commissioner's Office, published May 2026.

Credibility flags: no survey or study attached, no sample size given, this is a regulatory announcement rather than research, and the methodology behind the claim isn't disclosed.

How we scored this

A relevance score out of 100, built from three things: how well it fits the six practice types, how recent it is, and how solid the methodology behind it is.

40%

Practice fit, 25How new, 100How solid, 0

It's marked down mainly on how solid the method is, since there's nothing to assess there, though practice fit sits lower too because the law addresses all UK businesses rather than wellbeing specifically, and recency scores high given the deadline is imminent.

It's worth considering changes to your marketing practices

What this means for your marketing

Put a data complaints policy page on your website before 19 June.
Say the words "here's how to raise a concern about your data" somewhere in your onboarding pack.
Brief your team on the new deadline now, not the week before it lands.
Add a complaints contact line to your privacy notice, wherever that currently lives.
Tell existing clients quietly that your process has been updated, no fanfare required.

Who this is most useful for

Practice type	Relevance	Recommended action
Coaching	High	Draft a one-page complaints process this month.
Therapy	High	Update your client-facing privacy notice with a clear complaints route.
Training	Medium	Check where a booking-data complaint would actually land.
Alternative Healing	Medium	Add a complaints line to your intake forms.
Clinical	High	Fold this into existing records governance rather than starting fresh.
Retreat/Centre	Medium	Assign one named person to own data complaints.

Best before

Best before: recheck this against the ICO's own guidance once 19 June 2026 passes, since ico.org.uk tends to update notices like this without much warning.