Section 76(6)

In section 54 (meaning of “applicable time period” for responding to data subjects’ requests)— in subsection (1), after “45(3)(b)” insert “and (5)”, in subsection (2)— for “1 month, or such longer period as may be specified in regulations,” substitute “one month”, and at the end insert “, subject to subsection (3A)”, after subsection (3) insert— The controller may, by giving notice to the data subject, extend the applicable time period by two further months where that is necessary by reason of— the complexity of requests made by the data subject, or the number of such requests. A notice under subsection (3A) must— be given before the end of the period of one month beginning with the relevant time, and state the reasons for the delay. Where the controller reasonably requires further information in order to identify the information or processing activities to which a request under section 45(1) relates— the controller may ask the data subject to provide the further information, and the period beginning with the day on which the controller makes the request and ending with the day on which the controller receives the information does not count towards— the applicable time period, or the period described in subsection (3B)(a). An example of a case in which a controller may reasonably require further information is where the controller processes a large amount of information concerning the data subject. omit subsections (4) to (6).

← 5 · All articles · 7 →

Source: legislation.gov.uk · retrieved 2026-09-04