Responding to Data Subject Requests: Timelines and Exceptions
|

Responding to Data Subject Requests: Timelines and Exceptions

ByPrivacyiQ

Companies must respond to GDPR rights requests within strict timeframes. Here’s what counts as a valid request — and when deadlines can be extended. The default timeline to respond to data subject rights requests (access, erasure, objection, etc.) is one calendar month. You may extend this by two months if the request is: But —…

The Right to Erasure (Right to Be Forgotten)
| | |

The Right to Erasure (Right to Be Forgotten)

ByPrivacyiQ

The GDPR gives individuals the right to be forgotten in certain cases. Understand what this means for your company. Article 17 of the UK GDPR gives individuals the right to request the erasure of personal data where: However, this isn’t absolute. You may retain data if you need it for legal claims, compliance, or public…