Data Protection

by John Devlin

The Information Commissioner’s Office has recently issued new guidelines on calculating the period within which data controllers must comply with a  subject access request. Generally such requests must be dealt with as soon as possible but in any event within one month of receipt. The ICO ‘s new guidance is that the date of receipt starts the clock running so that if for example a subject access request is received on say the 5th September the one month period expires on 5th October. Previously the date of receipt was excluded when calculating the period in which to respond.

John Devlin Partner

For further information on this or more generally on the GDPR and the Data Protection Act 2018 please contact John Devlin by telephone on 01635 580858 or by email at 

John Devlin's Profile

View All the Litigation & Dispute Resolution Articles

View All the GDPR Articles