Legal and Professional Framework

Complaint handling sits within professional standards, healthcare regulation, consumer protection, and data protection law. Knowing the basics helps keep responses proportionate and defensible. ^[1][2][4][5]

Professional duties

GOC Standards of Practice expect fair, timely, and effective responses. ^[1] Where NHS contracts apply, statutory complaints procedures set minimum steps and timescales. ^[3] Independent providers generally mirror those principles to meet public expectations. ^[2]

Health regulators and consumer rules

In England, the Care Quality Commission (CQC) Regulation 16 requires systems for receiving, investigating, and responding to complaints. ^[2] The Consumer Rights Act 2015 covers goods and services - for example refunds, repairs, or replacements when spectacles or services fall short. ^[4]

Remedies should be: ^[4]

• clear
• lawful
• explained in writing, where appropriate

Data protection and confidentiality

Complaints files are personal data under the UK GDPR and Data Protection Act 2018. ^[5]

Access should be limited to those who need to know. ^[5]

Records should be accurate, proportionate, and retrievable, with retention aligned to policy. If a complaint alleges a data breach, it should be assessed and documented and, where criteria are met, notified in line with ICO guidance. ^[6]

Candour and fairness

Where harm has occurred, duty of candour principles apply: tell the person what happened, apologise, and explain next steps. ^[7] Maintain an impartial tone - fact-finding differs from defence. Offer the right to independent review once local resolution has been exhausted. ^[3]

• Core records to keep: complaints policy; easy-read guide for the public; log with dates and status; acknowledgement and response templates; investigation notes; decisions and remedies; learning register with owners and deadlines. ^[1]

Staff, locums, and contractors

All staff benefit from training on scripts, timelines, and escalation. ^[1] Contracts with labs, couriers, or IT providers can define responsibilities when their actions contribute to complaints. Locums need to know how to route concerns even on days when they are not on site. ^[1]

Making the framework visible

Visibility builds confidence. Information on how to complain should be displayed in reception and online, including contact options (email, phone, postal), accessibility adjustments, and interpreters on request. ^[2][8] Timelines and rights of escalation should be confirmed clearly so complainants do not feel trapped. ^[3]

• Quarterly review list: policy currency; staff training completion; log accuracy; closure times; proportion of cases with visible learning; parity of access for people with disabilities or limited English. ^[2][8][1]

References (numbered in text) Why we include references

1. Standards of practice for optometrists and dispensing opticians (effective from 1 January 2025) — General Optical Council Find (opens in a new tab)
2. Regulation 16: Receiving and acting on complaints — Care Quality Commission Find (opens in a new tab)
3. The Local Authority Social Services and National Health Service Complaints (England) Regulations 2009 — UK Government (legislation.gov.uk) Find (opens in a new tab)
4. Consumer Rights Act 2015 — UK Government (legislation.gov.uk) Find (opens in a new tab)
5. Data Protection Act 2018 — UK Government (legislation.gov.uk) Find (opens in a new tab)
6. Personal data breaches: a guide — Information Commissioner's Office Find (opens in a new tab)
7. Regulation 20: Duty of candour — Care Quality Commission Find (opens in a new tab)
8. Accessible Information Standard (DAPB1605) – Implementation guidance — NHS England Find (opens in a new tab)