Skip to content

Social Media and Online Platform Complaints

ComplaintsReviewed by Civil Help editorial team: 22 November 2025Next review: 8 June 20275 min
Verified against 4 sources
  • https://www.legislation.gov.uk/ukpga/2023/50/contents
  • https://www.ofcom.org.uk/online-safety
  • https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
  • https://www.legislation.gov.uk/ukpga/2010/15/contents

Complaints about social media and online platforms — including content moderation decisions, data privacy issues, marketplace disputes, and harmful content — are a growing area of consumer concern. The UK's Online Safety Act 2023 has introduced new obligations on platforms, and Ofcom now oversees online safety regulation.

Key points

  • The Online Safety Act 2023 requires platforms to have clear, accessible complaints mechanisms for content moderation decisions.
  • Ofcom is the UK's online safety regulator under the Online Safety Act — report systemic failures to Ofcom.
  • Data privacy complaints about social media platforms go to the Information Commissioner's Office (ICO).
  • Marketplace disputes (buying or selling on eBay, Amazon etc.) should first be raised through the platform's resolution centre.

The Online Safety Act and Platform Complaints

The Online Safety Act 2023 places duties on regulated user-to-user platforms and search services to protect users from illegal content and, for larger platforms, legal but harmful content. Under the Act, platforms must:

  • Have effective and accessible complaints mechanisms for content decisions
  • Respond to complaints about content moderation within a reasonable timescale
  • Provide clear information about what content is allowed and how moderation decisions are made

If a platform has removed your content, blocked your account, or refused to remove content you reported as harmful, use the platform's internal appeals mechanism first. If the platform fails to provide an accessible complaints process or systemically fails to comply with the Act's duties, you can report this to Ofcom.

Data Privacy Complaints

If a social media platform has misused your personal data — sharing it without consent, refusing a subject access request, or breaching data protection law — your complaint goes to the Information Commissioner's Office (ICO).

First, exercise your data rights directly with the platform (subject access requests, right to erasure, data portability). Platforms have one month to respond to data requests under UK GDPR. If they do not respond or their response is inadequate, complain to the ICO at ico.org.uk.

The ICO can investigate organisations and issue enforcement notices or fines for serious breaches. It can also uphold individual complaints and require organisations to take specific action.

Online Marketplace Disputes

If you have a dispute with a seller on an online marketplace (eBay, Amazon, Etsy, Facebook Marketplace), use the platform's dispute resolution system first. Most major platforms have a structured resolution process where you can escalate disputes to the platform if the seller does not respond or cooperate.

Your rights under the Consumer Rights Act 2015 apply to goods bought from professional sellers (traders) on these platforms, though the marketplace itself may not be liable for the underlying product. Consumer rights do not apply to private (consumer-to-consumer) sales.

If a marketplace does not resolve a genuine complaint and you paid by credit or debit card, consider a chargeback claim through your bank. For significant sums, the small claims court remains available.

The Online Safety Act in Practice: Platform Duties, Ofcom Enforcement, and ICO Data Rights

The Online Safety Act 2023 came into force on 31 October 2023 and represents the most significant expansion of online platform regulation in the UK. Understanding what rights the Act gives you — and its limitations — is essential for anyone pursuing a complaint about a social media platform or online service.

Categorised services and tiered duties: The Act divides regulated services into categories based on their size and likely risk. Category 1 services (the largest, highest-reach platforms such as major social media networks) have the most extensive duties — including obligations around legal but harmful content. Category 2 services have lighter-touch duties focused on illegal content. All regulated services must have accessible, transparent complaints mechanisms and must respond to reports about illegal content within defined timeframes. If a platform's complaints mechanism is difficult to find, does not work, or fails to provide any response to a report, this is itself a potential breach of the Act that you can report to Ofcom.

Using your platform rights effectively: When you raise a complaint with a platform — about content moderation, account suspension, or a failure to act on reported illegal content — follow up in writing if you do not receive a substantive response. Screenshot and save the content that prompted your complaint before reporting it (as platforms sometimes remove it before investigations are complete). Note the exact dates and times you reported content, the platform's reference numbers (if provided), and any response you received. This record is important both for any escalation to Ofcom and for any personal data or defamation claim.

ICO and your data rights on social media: Social media platforms hold significant personal data about you — including content you have posted, content you have interacted with, advertising profiles, and inferred characteristics. Under UK GDPR, you have the right to: access all data held about you (a Subject Access Request); have inaccurate data corrected; have data erased in certain circumstances (the right to erasure); object to processing for direct marketing; and receive your data in a portable format. Platforms must respond to Subject Access Requests within one month (extendable to three months for complex requests). If a platform does not respond or provides an inadequate response, complain to the ICO. The ICO has a dedicated complaints pathway for social media platform data rights issues and has taken enforcement action against major platforms.

Equality Act 2010 and online platforms: Social media platforms and online marketplaces are service providers for Equality Act 2010 purposes where they serve UK users. If you have been treated worse by a platform, suspended, or had content removed in a manner that you believe was discriminatory on the grounds of a protected characteristic (race, religion, disability, sex, sexual orientation, etc.), raise this with the platform and, if unresolved, report to Ofcom. The Equality and Human Rights Commission (EHRC) can also investigate systemic discriminatory practices by large online platforms.

Frequently asked questions

Can I sue a social media company for defamatory content about me?
You can pursue a defamation claim against the person who posted defamatory content, and potentially against the platform if it failed to remove content after being notified. Defamation claims are complex and expensive. The Online Safety Act creates new obligations on platforms to address illegal content (including defamation) — report it through the platform's complaints system first. Seek legal advice before issuing court proceedings.
My social media account was hacked — what can I do?
Use the platform's account recovery process immediately. Report the hack through the platform's security centre. If personal data was compromised, you can also report a personal data breach to the ICO. If financial fraud resulted from the hack (for example, fraud using your payment details stored on the platform), report to Action Fraud (actionfraud.police.uk) and contact your bank.
Ofcom says they cannot resolve individual complaints — what does that mean?
Like most regulators, Ofcom cannot act as an ombudsman and directly resolve individual complaints — it cannot, for example, force a platform to reinstate a specific account. Ofcom's role is to ensure platforms comply with the Online Safety Act systemically. However, your reports to Ofcom contribute to the intelligence that can trigger regulatory investigations and enforcement action.
How do I make a Subject Access Request to a social media platform?
Submit a Subject Access Request (SAR) in writing to the platform's data protection officer or privacy team — most major platforms have an online privacy portal where you can request a copy of your data. State clearly that you are making a Subject Access Request under UK GDPR Article 15. The platform must respond within one month. If they do not respond, or if the response is incomplete, complain to the ICO at ico.org.uk/make-a-complaint.
A platform removed my content but I did not break any rules — what can I do?
Use the platform's internal appeals mechanism first — under the Online Safety Act, regulated platforms must provide accessible appeals for content moderation decisions. If the appeal process is unavailable, broken, or produces no response, report this to Ofcom as a potential breach of the Act's complaints mechanism requirements. Keep records of every step, including screenshots of the content before removal and of your attempts to appeal.

What to do next

  1. 1
    Report online safety concerns to Ofcom

    Report online safety failures to the UK's online safety regulator.

  2. 2
    Make a data complaint to the ICO

    Complain about misuse of your personal data.

  3. 3
    Get consumer advice from Citizens Advice

    Free help with online shopping and marketplace disputes.

Official bodies and resources

Information Commissioner's Office

Regulator

The UK's independent authority for data protection and information rights, enforcing the UK GDPR and Data Protection Act 2018.

Office of Communications

Regulator

Regulates UK communications industries including telecoms, broadband, TV, radio, and postal services.

Citizens Advice

Charity

Provides free, confidential, and independent advice on a wide range of issues including benefits, housing, debt, and employment.

Was this page helpful?

Related guides

Data Breach Complaints

A data breach occurs when your personal information is accessed, disclosed, lost, or stolen in a way that was not authorised. Whether the breach involved your financial details, health records, or contact information, you have rights under UK GDPR and the Data Protection Act 2018 — including the right to complain to the Information Commissioner's Office (ICO) and to claim compensation.

5 min

How to Complain Effectively in the UK

Making a formal complaint can feel daunting, but a well-structured complaint significantly increases your chances of a satisfactory outcome. In the UK, most businesses and public bodies are required to have a complaints procedure, and following the right process gives you access to independent resolution if things go wrong.

6 min read

Retail and Consumer Complaints

When something goes wrong with a purchase — whether in a shop or online — this guide explains the complaint process: how to approach the retailer, what to say, how to escalate if they refuse, and when to take formal action. For a detailed explanation of your legal rights under the Consumer Rights Act 2015, see our guide on <a href="/complaints-ombudsmen/consumer-rights-returns">consumer rights and returns</a>. For complaints about dangerous or defective products, see our <a href="/complaints-ombudsmen/faulty-goods-complaints">faulty goods guide</a>.

6 min

Regulator vs Ombudsman: What's the Difference

Many people are confused about whether to contact a regulator or an ombudsman when their complaint is not resolved. The two serve very different purposes: ombudsmen resolve individual disputes between consumers and organisations, while regulators oversee industries and enforce rules. Knowing which to contact — and when — is key to getting the right outcome.

5 min read

Complaining to the Information Commissioner about a Data Breach

The Information Commissioner's Office (ICO) regulates data protection in the UK. They handle complaints about misuse of personal data, failure to respond to Subject Access Requests, marketing breaches under PECR, and breaches of UK GDPR. Many complaints are resolved with a written reminder to the organisation; serious breaches lead to fines up to £17.5 million. This guide explains how to use the ICO and how to claim separately for compensation.

9 min

Disclaimer

This information is for general guidance only and does not constitute legal advice. You should seek qualified legal help if your situation requires it.