Search

How can we help?

Icon

ICO updated guidance on the timeframe for complying with subject access requests

  • 16 August 2019
  • Privacy and Data Protection

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.

ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile
Louise Keenan

Associate

View profile

+44 118 960 4614

About this article

  • Subject
    ICO updated guidance on the timeframe for complying with subject access requests
  • Author
    Louise Keenan
  • Expertise
    Privacy and Data Protection
  • Published
    16 August 2019

Read, listen and watch our latest insights

art
  • 25 June 2026
  • Immigration

Justice and Home Affairs Committee – Settlement, Citizenship and Integration: What the House of Lords Report Means for Migrants

Discover how the House of Lords report influences UK settlement, citizenship, and integration policies. Learn what it means for migrants and employers.
art
  • 24 June 2026
  • Employment

What are employer’s obligations during a heatwave?

During the summer, employers can come across employee issues relating to the heat and hot weather. How can employers handle hot weather and what are employer obligations during a heatwave?

art
  • 23 June 2026
  • Employment

Pride month and employment law: Ensuring compliance with LGBTQ+ protections

With each Pride month, companies unveil rainbow logos and send office wide emails of solidarity. These gestures are valuable, giving visible demonstrations of support, but only really make a difference if those companies are able to truly say that their policies and practices are inclusive and legally compliant.
art
  • 22 June 2026
  • Commercial Real Estate

Do you need an EPC for lease renewals? Key insights for commercial property owners

When is an EPC required for leases? The non-domestic EPC guidance makes it clear that an EPC is not required on renewal. The Ministry for Housing, Communities and Local Government’s (MHCLG’s) “A guide to energy performance certificates for the construction, sale and let of non-dwellings: Improving the energy efficiency of our buildings”
Pub
  • 18 June 2026
  • Employment

Employment Rights Act 2025: Key Changes for Employers

Join Katie Glendinning and Lucy White for an on demand webinar as they break down the key changes introduced by the Employment Rights Act 2025, offering clear insights into what these reforms mean in practice for employers and HR professionals.
art
  • 18 June 2026
  • Corporate and M&A

Business sales and NDAs: Creating a safe space to open up your business

You have accepted an offer to sell your business, but taking an agreement in principle through to completion may involve the need to divulge your company’s private information – perhaps deep secrets which have given your business its competitive edge.  
See More