Data Subject Access Requests have different deadlines established by the applicable regulations, for each jurisdiction. Below is a list of the deadlines for the regulations we cover.
Jurisdiction | Regulation | Deadline |
Argentina |
PDPL | 5 days - right to access 10 days - right to rectify, update or delete |
Australia |
Privacy Act 1988 | 30 days |
Brazil |
LGPD | 30 days (15 for access request) |
Canada |
PIPEDA | 30 days |
Canada - Alberta |
PIPA-AB | 45 days (30 days for access request) |
Canada - British Columbia |
PIPA-BC | 30 days + 30 days |
Canada - Quebec |
Quebec Law 25 | 30 days |
China |
PIPL | 30 days |
Colombia |
Law 1581 | Not defined |
Ecuador |
LOPDP | Not defined |
European Union |
GDPR | 30 days + 30 days |
European Union |
ePrivacy Directive | Not defined |
France |
CNIL | 30 days + 30 days |
Germany |
BDSG | 30 days |
Indonesia |
PDP | 3 days |
Ireland |
DPC | 30 days + 30 days |
Israel |
PPL | Not defined |
Japan |
APPI | 30 days |
Mexico |
LFPDPPP | 15 days |
Nigeria |
NDPB | Not defined |
Saudi Arabia |
PDPL | 30 days |
Singapore |
PDPA | Not defined |
South Africa |
POPIA | 30 days |
South Korea |
PIPA | 10 days |
Spain |
AEPD | 30 days + 30 days |
Thailand |
PDPA | 30 days |
Turkey |
KVKK | 30 days |
United Kingdom |
UK GDPR | 30 days + 30 days |
Uruguay |
U-PDPL | 5 days |
USA - California |
CCPA/CPRA | 45 days + 45 days |
USA - Colorado |
CPA | 45 days |
USA - Nevada |
NPL | 60 days + 30 days |
USA - Utah |
UCPA | 45 days + 45 days |
USA - Virginia |
VDCPA | 45 days (60 days for appeal) |
If you encounter any challenges, please reach out to us at support@clym.io.