ICO updated guidance on the timeframe for complying with subject access requests
- 16 August 2019
- Privacy and Data Protection
Keep up to date with the latest tips, analysis and upcoming events by our legal experts, direct to your inbox.
The ICO has updated its guidance on the timeframe for compliance with subject access requests. Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request. Now, the guidance states, that the day of receipt is the correct start date. The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.
Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.
ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.
Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.
