SAR deadline calculator
A Subject Access Request has a strict legal clock. Enter the date below to get the exact deadline — one calendar month, with weekend and bank-holiday roll-forward and complex-request extensions handled for you.
The one-month clock starts when you've confirmed who they are — not when the request first arrived.
A SAR can be extended by up to two further months if it's complex or numerous — but you must tell the requester within the first month.
You must respond by
Friday, 21 August 2026
One calendar month from Tuesday, 21 July 2026.
Don't track this by hand.
DataDeadline starts this clock automatically the moment a request lands, warns you before it's due, and keeps a timestamped audit trail — proof you responded in time.
Track it free →For guidance only — deadlines are estimates you should verify against current ICO guidance. DataDeadline doesn't provide legal advice.
How the SAR deadline works
How long do you have to respond to a Subject Access Request?
Under UK GDPR you must respond without undue delay and within one calendar month. The clock starts the day you receive the request — or, if you need it to confirm the person's identity, the day you receive that confirmation.
What if the deadline lands on a weekend or bank holiday?
If the final day falls on a Saturday, Sunday or an England & Wales bank holiday, the deadline moves to the next working day. This calculator applies that roll-forward automatically.
Can you extend the SAR deadline?
Yes — for complex or numerous requests you can extend by up to two further months (three months total). You must tell the requester about the extension, and why, within the first month.
How long to acknowledge a data-protection complaint?
As a rule of thumb you should acknowledge a complaint within 30 days. Select 'Complaint' above to calculate that window.
What happens if you miss a SAR deadline?
The requester can complain to the Information Commissioner's Office (ICO), which can investigate and, in serious cases, fine up to £17.5 million or 4% of annual turnover. Missing deadlines is one of the most common ICO complaints against small businesses.
Stop calculating deadlines by hand
DataDeadline receives every SAR and complaint through your own form, starts the legal clock automatically, warns you before it's due, and keeps the audit trail. Free to receive and track.