How to respond to subject access requests in the summer holidays

Learn how to take practical steps to meet your deadlines for responding to subject access requests over the summer holidays. Find out when you can extend the deadline for 'complex' requests and download our template letter to notify individuals of the extension.

Last reviewed on 17 May 2023
School types: All · School phases: All
Ref: 35524
Contents
  1. The same rules apply as any other time
  2. Make use of the staff who are already working
  3. Create a designated email address for requests to be submitted to
  4. Set up processes and logins in advance
  5. Extend the response time only if the request is too complex
  6. Make your position clear in your privacy notices
  7. What you cannot do

The same rules apply as any other time

You must respond to subject access requests as soon as you can, and within:

  • 1 month of receiving the request in normal circumstances
  • 3 months of receiving the request, if it's complex or you get several requests from the same person (though you have to inform them of the extension within 1 month)

You'll likely find it more difficult to respond to requests over the summer holidays, so read our practical steps below to help you meet your deadlines.

Make use of the staff who are already working

If your DPO doesn't work over the summer, you can ask another member of staff working over the summer to help you respond to requests. Ask them to keep an eye on