England and Wales commercial and regulatory procedures
When can a controller extend a UK GDPR request by two months?
Two further months where necessary, with notice during the initial month. Give a reasoned extension notice and complete the rights-request response. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
- Period
- Two further months where necessary, with notice during the initial month
- Trigger
- Relevant time under Article 12A and timely reasoned extension notice
- Rule
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6). The retained source governs give a reasoned extension notice and complete the rights-request response. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Source guide · No automated date
Check the applicable procedure
Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods. Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval. The actual relevant time under Article 12A and timely reasoned extension notice and required completion must be established before using a final date.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)What lawyers say
5.0“The platform is really easy to use.”
Michael B.Employment litigation attorney · California
“The Evidence Record saved us time with our insurance on bankruptcy matters.”
MariaBankruptcy and commercial attorney · London, UK
“The most up-to-date service we could find.”
Li ChenArbitration practitioner · Singapore
When can a controller extend a UK GDPR request by two months?
Two further months where necessary, with notice during the initial month. Give a reasoned extension notice and complete the rights-request response. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Responsible actor. Controller handling eligible complex or numerous requests.
Relevant time under Article 12A and timely reasoned extension notice.
Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)How does this provision count time?
- Give a reasoned extension notice and complete the rights-request response.
- Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval.
- Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval.
Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)Which facts prevent one automatic date?
Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods. Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval. The actual relevant time under Article 12A and timely reasoned extension notice and required completion must be established before using a final date.
The controller handling eligible complex or numerous requests has established the applicable procedure and relevant time under Article 12A and timely reasoned extension notice. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods. Give a reasoned extension notice and complete the rights-request response. Two further months where necessary, with notice during the initial month. No computed final date is supplied.
A proposed completion raises a nonbusiness-day or time-boundary question for give a reasoned extension notice and complete the rights-request response. Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval. Resolve this boundary under the identified provision and actual completion route. Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval.
The controller only decides to seek an extension after the initial notice period has passed. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods. Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods. No automatic final date follows from this scenario.
Which conditions and exceptions apply?
- Applicable procedure and actual event
- Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
- Counting and completion boundary
- Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval.
- Complexity or number must make the extension necessary. It is not an automatic three-month response entitlement. An eligible clarification pause can affect notice and response periods.
- Controller handling eligible complex or numerous requests. Relevant time under Article 12A and timely reasoned extension notice. Give a reasoned extension notice and complete the rights-request response. Article 12A(3)–(5) governs both the extra months and timely notice. Preserve the actual latest relevant event and paused interval.
What must the responsible actor complete?
Questions about this procedure
When can a controller extend a UK GDPR request by two months?
Is every request allowed three months?
No. Two further months require necessity by reason of complexity or number.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)When must notice be given?
Before the end of the initial month beginning with the relevant time.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)Must the notice explain the delay?
Yes. Article 12A(4)(b) requires reasons.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)Can an eligible clarification pause affect extension notice time?
Yes. Paragraph 5 expressly covers the period described in paragraph 4(a).
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)Does the extension remove the undue-delay duty?
No. Article 12’s duty remains relevant.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)What facts should be retained?
The relevant event, objective extension reasons, notice and any lawful clarification interval.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6)Official sources and review
Provisions used (1)
| Provision | Purpose |
|---|---|
| Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance), Article 12A(1)–(6) | Check the identified procedure, event, counting rule or qualification |