Data Protection

The Information Commissioner’s Office has recently issued new guidelines on calculating the period within which data controllers must comply with a  subject access request. Generally such requests must be dealt with as soon as possible but in any event within one month of receipt. The ICO ‘s new guidance is that the date of receipt starts the clock running so that if for example a subject access request is received on say the 5th September the one month period expires on 5th October. Previously the date of receipt was excluded when calculating the period in which to respond.