Calculate a subject access request deadline

How the SAR deadline is calculated

The one calendar month deadline under UK GDPR runs from the first working day after the request is received. If the deadline falls on a weekend or bank holiday, ICO guidance and practical compliance practice generally treat the next working day as the effective deadline. Use the calculator above to check your specific date - but always verify against the organisation's actual receipt date.

When the SAR clock starts

The clock starts when the organisation receives a request it can reasonably understand. For email, this is the time the email arrives in the inbox. For postal requests, it is the day the letter is delivered and opened. If the request is sent on a weekend or bank holiday, most organisations treat the next working day as the start date.

Complex requests and extensions

If a SAR is complex - for example, involving a large volume of data, multiple systems, or third-party data - the organisation can extend the deadline by up to two more months. They must notify you within the first month, giving reasons for the extension. This calculator does not apply extensions - use it for standard single-month planning only.

ICO guidance and your rights

The Information Commissioner's Office (ICO) is the UK regulator for data protection. If an organisation fails to meet its SAR obligations, you can complain to the ICO at ico.org.uk. The ICO cannot compel an organisation to comply on your behalf, but it can investigate, issue notices, and take enforcement action.