1. Knowledge base
  2. Data subject requests (DSRs)

What are some of the common deadlines for answering a DSAR?

Data Subject Access Requests have different deadlines established by the applicable regulations, for each jurisdiction. Below is a list of the deadlines for the regulations we cover.

Jurisdiction Regulation Deadline

Argentina

PDPL 5 days - right to access
10 days - right to rectify, update or delete

Australia

Privacy Act 1988 30 days

Brazil

LGPD 30 days
(15 for access request) 

Canada

PIPEDA 30 days

Canada - Alberta

PIPA-AB 45 days
(30 days for access request) 

Canada - British Columbia

PIPA-BC 30 days + 30 days

Canada - Quebec

Quebec Law 25 30 days

China

PIPL 30 days

Colombia

Law 1581 Not defined

Ecuador

LOPDP Not defined

European Union

GDPR 30 days + 30 days

European Union

ePrivacy Directive Not defined

France

CNIL 30 days + 30 days

Germany

BDSG 30 days

Indonesia

PDP 3 days

Ireland

DPC 30 days + 30 days

Israel

PPL Not defined

Japan

APPI 30 days

Mexico

LFPDPPP 15 days 

Nigeria

NDPB Not defined

Saudi Arabia

PDPL 30 days

Singapore

PDPA Not defined

South Africa

POPIA 30 days

South Korea

PIPA 10 days

Spain

AEPD 30 days + 30 days

Thailand

PDPA 30 days

Turkey

KVKK 30 days

United Kingdom

UK GDPR 30 days + 30 days

Uruguay

U-PDPL 5 days

USA - California

CCPA/CPRA 45 days + 45 days

USA - Colorado

CPA 45 days

USA - Nevada

NPL 60 days + 30 days

USA - Utah

UCPA 45 days + 45 days

USA - Virginia

VDCPA 45 days
(60 days for appeal) 

If you encounter any challenges, please reach out to us at support@clym.io.