When do I have to provide relevant information to data subjects? #GDPR

You must provide relevant information to the data controller without undue delay and in any event within one month of receipt of the request. If you need more time you need to tell the data subject and explain why. If you have not taken the action requested you should provide the details of the supervisory authority, the Information Commissioners Office so the data subject may lodge a complaint.

View our GDPR page for more information