Why Engage Regulators?
- To enforce accountability when an organisation fails in its duties
- To trigger formal investigations that internal processes might avoid
- To create an official record of your complaint outside the institution
- To support related proceedings — a grievance, employment tribunal, or court claim
The Strategic Principles
- Act in Parallel: Submit to a regulator while a grievance is ongoing. This protects you against internal delays or cover-ups.
- You Don't Need a Lawyer: Regulatory complaints are designed to be accessible to individuals. Your own clear, evidence-based account is what matters most.
- Create a Paper Trail: For every submission, insist on a reference number and written confirmation of receipt.
- Show the Pattern: If your complaint involves linked issues, state this clearly. Reference your complaint to Regulator B when writing to Regulator A.
- Document Everything: Preserve all communications and submit evidence in writing wherever possible.
Key Regulators: Who to Contact and When
Information Commissioner's Office (ICO)
Data protection breaches, misuse of personal data, UK GDPR violations, and failures to respond to a SAR.
Strategic tip: Frame your complaint to highlight a systemic failure in the organisation's policies — not just a one-off mistake.
Health and Safety Executive (HSE)
Workplace health and safety, including stress, bullying where it creates a risk to health, and unsafe working conditions.
Strategic tip: Reporting to the HSE frames the issue as a systemic safety failure — not a personal dispute.
Equality and Human Rights Commission (EHRC)
Serious and systemic discrimination, harassment, and breaches of the Public Sector Equality Duty (PSED). For individual advice, contact the EASS first.
Strategic tip: The EHRC has a high bar. Demonstrate a widespread problem using statistics, policies, or multiple accounts.
Protect (Whistleblowing Charity)
Free, confidential advice to individuals who need to report wrongdoing. Not a regulator — an advisory body. Contact them before you act.
Strategic tip: Getting advice from Protect before you act is critical to ensuring you are legally protected.
PHSO (via your MP)
Investigates maladministration in public services including universities and the NHS. You must be referred by your MP.
Strategic tip: When writing to your MP, focus on procedural unfairness. MPs are more likely to refer cases about flawed processes.
Office for Students (OfS)
Systemic breaches in the HE sector — equality duties, harassment, safeguarding, and failure to follow own policies.
Strategic tip: The OfS rarely investigates individuals. Frame as evidence of institutional failure: "This is an example of a broader failure to..."
Office of the Independent Adjudicator (OIA)
Final stage for student complaints after the internal university process is exhausted. Reviews whether the university followed its own procedures fairly.
Strategic tip: Focus on procedural errors, not academic disagreements. The OIA will not make new academic judgments.
The Pensions Regulator (TPR)
Employer failing to pay correct pension contributions or failing to auto-enrol staff.
Strategic tip: A complaint to the TPR can trigger a formal investigation and significant fines — creating powerful leverage.
How to Build Your Case for a Regulator
Create a Chronology
Start with a clear, dated timeline of every key event. This will form the backbone of your submission.
Gather Your Evidence
Collect the organisation's own policies, all email correspondence, formal letters, and your own dated notes of meetings and verbal conversations.
Use Their Policies Against Them
Directly quote the sections of their own policies that they have violated. Reference the specific legal duties you believe have been breached.
Write a Clear Submission
Be concise and factual. Use headings and bullet points. State clearly at the start what the complaint is about and what you want the regulator to do.