Home / Publications / GDPR bitesize – when can an employer justify extending...

GDPR bitesize – when can an employer justify extending the time limit for responding to a DSAR?

09/05/2019

Under the Data Protection Act 1998, a data controller had to respond to a data subject access request (DSAR) within 40 days of receipt with no option to extend this period. This changed under the GDPR and a data controller must now respond “without undue delay...

Read more

Authors

Portrait ofGary Henderson
Gary Henderson
Partner
Reading
Portrait ofMolly Grace
Molly Grace
Senior Associate
London