This article is part of The Duty.
What an ICO evidence pack looks like.
When the ICO asks to see your compliance with section 164A, you cannot send them a Zendesk CSV or a spreadsheet of tickets.
The regulator expects an auditable trail that proves the 30-day duty was met. This means cryptographic proof of when the complaint was received, exactly what was sent in acknowledgement, and when that acknowledgement was transmitted.
TheDutyDesk produces this pack in one click. Every pack contains:
- The original intake payload and metadata
- A complete timeline of all communications
- Cryptographic hashes proving the timeline has not been altered
- Evidence of the 30-day SLA compliance
Read next
- The practical 30-day clock — what counts as day one, and what an acknowledgement requires.
- Who does the duty apply to? — scope, sector coverage, and the four main obligations.