Can we extend the time for responding to a Subject Access Request?

You can extend the time to respond by a further two months if the request is complex or you have received a number of requests from the individual. You must let the individual know within one month of receiving their request and explain why the extension is necessary.

However, it is the ICO’s view that it is unlikely to be reasonable to extend the time limit if:

  • it is manifestly unfounded or excessive;
  • an exemption applies; or
  • you are requesting proof of identity before considering the request.