Search

How can we help?

Icon

ICO updated guidance on the timeframe for complying with subject access requests

  • 16 August 2019
  • Privacy and Data Protection

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.

ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile
Louise Keenan

Associate

View profile

+44 118 960 4614

About this article

  • Subject
    ICO updated guidance on the timeframe for complying with subject access requests
  • Author
    Louise Keenan
  • Expertise
    Privacy and Data Protection
  • Published
    16 August 2019

Read, listen and watch our latest insights

art
  • 19 August 2026
  • Employment

Managing employee redundancies: Frequently asked questions (FAQs)

Redundancy should be an employer’s last option when restructuring their business. There are necessary steps that should be taken to ensure that redundancy is the best move forward
art
  • 18 August 2026
  • Immigration

Home Office curtailment of Sponsored Workers’ permission: Why employers and employees must act quickly

The Home Office has recently changed the speed at which it processes sponsor notifications following the end of a sponsored worker’s employment.

art
  • 13 August 2026
  • Employment

ACAS Draft New Code on Disciplinary and Grievance Procedures

ACAS have published a draft Code on 30 July 2026, which will replace the 2015 ACAS Code on disciplinary and grievance procedures when the Code is finalised at the end of September 2026.

art
  • 12 August 2026
  • Corporate and M&A

EMIs – April 2026 changes explained

On 6 April 2026 the Enterprise Management Incentive scheme (EMI) was expanded to make EMIs accessible to a wider range of businesses.
art
  • 06 August 2026
  • Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.
Pub
  • 06 August 2026
  • Employment

Employment law changes in 2026: What you need to know

With ongoing changes to UK employment law, staying updated is more challenging than ever. Join Monica Atwal and Harry Berryman for a live webinar covering 2026 HR changes and key employment law updates on Thursday 17 September.

See More