Data Protection: Subject Access Requests and Individual Rights – timescales changed

In August, the Court of Justice of the European Union ruled on a Dutch case which considered timescales under Regulation No 1182/71. Following this ruling, the Information Commissioner’s Office has updated their guidance on timescales for responding to subject access requests (SAR), and other individual rights requests.

The effect of the ruling is that the timescale has now changed to reflect the day of receipt as ‘day one’, as opposed to the day after receipt. For example, a SAR received on 3 September should be responded to by 3 October.

Published: 25 September 2019

Article Sections: International Issues | Miscellaneous

Tags: data protection, SARs, GDPR


The data contained within this document is for general information only. No responsibility can be accepted for inaccuracies. Readers are also advised that the law and practice may change from time to time. This document is provided for information purposes only and does not constitute legal advice. Professional legal advice should be obtained before taking or refraining from any action as a result of the contents of this document.