Data Protection: Subject Access Requests and Individual Rights – timescales changed
In August, the Court of Justice of the European Union ruled on a Dutch case which considered timescales under Regulation No 1182/71. Following this ruling, the Information Commissioner’s Office has updated their guidance on timescales for responding to subject access requests (SAR), and other individual rights requests.
The effect of the ruling is that the timescale has now changed to reflect the day of receipt as ‘day one’, as opposed to the day after receipt. For example, a SAR received on 3 September should be responded to by 3 October.
Published: 25 September 2019