Responding to Data Subject Requests: Timelines and Exceptions
Companies must respond to GDPR rights requests within strict timeframes. Here’s what counts as a valid request — and when deadlines can be extended.
-
-
Verifying Identity Before Fulfilling a GDPR Request
You can ask for ID before fulfilling GDPR requests — but only when necessary. Here’s how to verify identity without breaching privacy.
-
When Can You Refuse a Data Subject Request?
Under GDPR, companies can refuse rights requests that are manifestly unfounded or excessive. Learn when and how to lawfully say no.
