Search

How can we help?

Icon

ICO updated guidance on the timeframe for complying with subject access requests

  • 16 August 2019
  • Privacy and Data Protection

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.

ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile
Louise Keenan

Associate

View profile

+44 118 960 4614

About this article

  • Subject
    ICO updated guidance on the timeframe for complying with subject access requests
  • Author
    Louise Keenan
  • Expertise
    Privacy and Data Protection
  • Published
    16 August 2019

Read, listen and watch our latest insights

art
  • 12 May 2026
  • Immigration

Supplementary Employment: When is it Allowed under UK Immigration Rules?

This article provides a guidance to understanding the rules on supplementary employment in the UK.
Pub
  • 11 May 2026
  • Immigration

How to prepare for Sponsor Licence Compliance in 2026: Essential tips for UK employers

Join immigration experts Ruth Karimatsenga and Monica Mastropasqua for an in-depth podcast discussion on sponsor licence compliance in 2026.
Pub
  • 07 May 2026
  • Employment

Employment Rights Act 2025: Key Changes for Employers

Join Katie Glendinning and Lucy White for a live webinar as they break down the key changes introduced by the Employment Rights Act 2025, offering clear insights into what these reforms mean in practice for employers and HR professionals.
art
  • 07 May 2026
  • Public Procurement

What the First Procurement Act 2023 Judgment Means for Automatic Suspension

It has been more than a year since the Procurement Act 2023 (PA23) came into force in February 2025, and the long wait for the first High Court judgment on the Act to be published is finally over.
art
  • 06 May 2026
  • Corporate and M&A

Community Interest Companies – What do you need to know?

This article seeks to provide an overview of the CIC structure’s key characteristics, the types of enterprises it suits, and some practical tips on the application process.
art
  • 06 May 2026
  • Privacy and Data Protection

Use of Personal Devices at Work: Why a Bring Your Own Device Policy is Essential

If you have employees who bring their own devices into the workplace and use said devices to deal with company data, you may want to consider a Bring Your Own Device (“BYOD”) policy.
See More