Human resources at a click

ICO updated guidance on the timeframe for complying with subject access requests

Woman with phone and laptop

The ICO has updated its guidance on the timeframe for compliance with subject access requests.  Previously, the ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.  Now, the guidance states, that the day of receipt is the correct start date.  The ICO have given the example of a SAR being received on 3rd September and have stated that this should now be replied to by 3rd October.

Employers who were using the ICO’s previous guidance should take note of this and ensure processes are adjusted accordingly.

ICO stated that requests should be responded to within one calendar month starting the day after receipt of the request.

Disclaimer This information is for guidance purposes only and should not be regarded as a substitute for taking professional and legal advice. Please refer to the full General Notices on our website.
Louise_Keenan
Louise Keenan
Associate

Related Articles

Since the UK GDPR came into force in 2018, which was an overhaul in data protection, many employers and organisations...

The UK’s data protection framework is about to undergo its most significant change since the UK GDPR came into force....

On 6 May 2025, the SRA authorised the first law firm providing legal services through artificial intelligence. Garfield.Law will provide...

Related Resources

Surveillance impact assessment

Surveillance impact assessment form. Employee Monitoring Impact Assessment Considerations Suspected criminal activity or equivalent malpractice

...

Data Subject Access Request checklist

Data protection policy

Policy for data protection. Purpose & Scope We need to collect and use certain types of information about individuals (such...

Human resources at a click