Search

How can we help?

Icon

ICO updated guidance on the timeframe for complying with subject access requests

  • 16 August 2019
  • Privacy and Data Protection

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.

ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile
Louise Keenan

Associate

View profile

+44 118 960 4614

About this article

  • Subject
    ICO updated guidance on the timeframe for complying with subject access requests
  • Author
    Louise Keenan
  • Expertise
    Privacy and Data Protection
  • Published
    16 August 2019

Read, listen and watch our latest insights

art
  • 20 May 2026
  • Immigration

AI vs Home Office approved Translations – why migrants are paying the price

AI is transforming almost every professional sector. Law firms now use AI-assisted drafting, businesses rely on automated translation software, and governments increasingly use digital systems for decision-making.

art
  • 20 May 2026
  • Employment

Trade Unions Right of Access from October – What you need to know

Under the Employment Rights Act 2025, independent Trade Unions (i.e. those with a certificate of independence) will have a right to access workplaces (physically and digitally) from October 2026.
art
  • 19 May 2026
  • Privacy and Data Protection

New Complaints Procedure for Data Protection Coming in June – Are You Ready?

The Data (Use and Access) Act 2025 (the “Act”) received Royal Assent last year and introduces slight reforms to the UK’s data protection regime.

art
  • 18 May 2026
  • Commercial Real Estate

Land Registry title to property mines and minerals

Depending on the location of the property, it is quite common in parts of England and Wales for a property title to contain a reference to mines and minerals, and for these to be excluded from the surface owner’s ownership in favour of another party.

art
  • 13 May 2026
  • Employment

10 top tips for negotiating a redundancy settlement agreement, for employers and employees

Redundancies are on the rise, resulting in increased use of settlement agreements. We’ve compiled our top 10 tips for drafting and negotiating these agreements to support both employers and employees through this challenging process.
art
  • 12 May 2026
  • Immigration

Supplementary Employment: When is it Allowed under UK Immigration Rules?

This article provides a guidance to understanding the rules on supplementary employment in the UK.
See More