Section 99(3)

The controller must, before the end of 21 days beginning with the relevant time, give a notice to the data subject— stating that the controller has complied or intends to comply with the notice under subsection (1), or stating the controller's reasons for not complying with the notice to any extent and the extent (if any) to which the controller has complied or intends to comply with the notice under subsection (1).

← 2 · All articles · 4 →

Source: legislation.gov.uk · retrieved 2026-09-04