All Rights Reserved Karen Kirby Counselling © 2026
The Data Use and Access Act 2025 (DUAA) is a new law
that updates how personal data is handled in the UK. It doesn't replace existing laws like the UK GDPR or the Data Protection Act 2018 - it simply updates and adds to them. Below is a summary of what this means.
Complaints about the use of personal data
As a client you now have a formal right to complain, if you believe your personal information hasn't been handled correctly. As a practitioner, I will need to:
• Make it easy for you to raise a complaint by providing an email – please email: enquiries@karenkirbycounselling.uk
• I undertake to acknowledge any complaint within 30 days.
• I will keep you informed and let them know the outcome as soon as I reasonably can and 'without undue delay'.
Subject Access Requests (SARs)
As a client you can ask to see the personal information I hold about you; the DUAA allows clarity and flexibility:
• If your request is unclear or very broad, effectively I can now "stop the clock" - pausing my response deadline while I go back to you for clarification.
Explicit consent to obtain website cookies is no longer required.
