Change in Advice – Subject Access Requests (SARs)

The Information Commissioner's Office (ICO) recently changed the timescales for responding to Subject Access Requests (SARs).

The Information Commissioner's Office (ICO) recently changed the timescales for responding to Subject Access Requests (SARs).

The general rule is that you have a month to comply with a SAR, ICO guidance said ‘You should calculate the time limit from the day after you receive the request (whether the day after is a working day or not) until the corresponding calendar date in the next month.’

This guidance has now been updated to ‘You should calculate the time limit from the day you receive the request (whether it is a working day or not) until the corresponding calendar date in the next month.’

In light of this change, you may want to review any deadlines you have calculated.

See Recording Subject Access Requests Quick Reference Guide for details.