The ICO has updated its guidance on the timeframe for compliance with subject access requests. Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request. Now, the guidance states, that the day of receipt is the correct start date. The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.
Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.
ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.
