Articles on: Data subject requests (DSRs)

What are some of the common deadlines for answering a DSAR?


Data Subject Access Requests have different deadlines established by the applicable regulations for each jurisdiction. Below is a list of the deadlines for the regulations we cover.


Jurisdiction

Regulation

Deadline

Argentina

PDPL

5 days - right to access10 days - right to rectify, update or delete

Australia

Privacy Act 1988

30 days

Brazil

LGPD

30 days(15 for access request)

Canada

PIPEDA

30 days

Canada - Alberta

PIPA-AB

45 days(30 days for access request)

Canada - British Columbia

PIPA-BC

30 days + 30 days

Canada - Quebec

Quebec Law 25

30 days

China

PIPL

30 days

Colombia

Law 1581

Not defined

Ecuador

LOPDP

Not defined

European Union

GDPR

30 days + 30 days

European Union

ePrivacy Directive

Not defined

France

CNIL

30 days + 30 days

Germany

BDSG

30 days

Indonesia

PDP

3 days

Ireland

DPC

30 days + 30 days

Israel

PPL

Not defined

Japan

APPI

30 days

Mexico

LFPDPPP

15 days

Nigeria

NDPB

Not defined

Saudi Arabia

PDPL

30 days

Singapore

PDPA

Not defined

South Africa

POPIA

30 days

South Korea

PIPA

10 days

Spain

AEPD

30 days + 30 days

Thailand

PDPA

30 days

Turkey

KVKK

30 days

United Kingdom

UK GDPR

30 days + 30 days

Uruguay

U-PDPL

5 days

USA - California

CCPA/CPRA

45 days + 45 days

USA - Colorado

CPA

45 days

USA - Nevada

NPL

60 days + 30 days

USA - Utah

UCPA

45 days + 45 days

USA - Virginia

VDCPA

45 days(60 days for appeal)


If you encounter any challenges, please reach out to us at support@clym.io.

Updated on: 22/04/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!