Tribunal decision on data protection complaint handling