ICO updated guidance on the timeframe for complying with subject access requests

Published on: 15/08/2019

#Data Protection

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.


This information is for guidance purposes only and should not be regarded as a substitute for taking professional and legal advice. Please refer to the full General Notices on our website.