Responding to Data Subject Requests: Timelines and Exceptions
|

Responding to Data Subject Requests: Timelines and Exceptions

ByPrivacyiQ

Companies must respond to GDPR rights requests within strict timeframes. Here’s what counts as a valid request — and when deadlines can be extended. The default timeline to respond to data subject rights requests (access, erasure, objection, etc.) is one calendar month. You may extend this by two months if the request is: But —…

A young woman skillfully sandboards down a vast desert dune under a clear sky, showcasing adventure and thrill.
|

Understanding the Right of Access: What Your Company Needs to Know

ByPrivacyiQ

The UK GDPR gives individuals the right to access their personal data. Here’s what companies need to know about handling Subject Access Requests (SARs) effectively. The UK GDPR gives individuals the right of access under Article 15. This allows people to ask what personal data your company holds about them and request a copy. SARs…