Following a recent ruling by the Court of Justice of the European Union (CJEU) relating to the General Data Protection Regulation (GDPR) and Data Protection Act 2018, the Office of the Information Commissioner (ICO) has updated its guidance on calculating deadlines, effecting the timescales organisations have to respond to requests relating to individual rights, including Subject Access Requests (SARs).
The effect of the change is that the day a request is received should now be used to determine the date a response is due. Previously under GDPR, deadlines were calculated from the day after a request was received.
For further information click here.