LeadersSafeguardingCPDGovernorHubKeyGPT
Training Hub

How to respond to subject access requests over the summer holidays

Learn the practical steps to meet your deadlines for responding to subject access requests over the summer holidays. Find out when you can extend the deadline for complex requests, and download our template letter to notify individuals of the extension.

Last reviewed on 24 June 2025
School types: All•School phases: All•Ref: 35524
Contents
  1. The same rules apply as at any other time
  2. Make use of the staff who are working
  3. Create a designated email address for requests
  4. Set up processes and logins in advance
  5. Make your position clear in your privacy notices
  6. Only extend the response time if the request is complex
  7. What you can't do

The same rules apply as at any other time

You must respond to subject access requests as soon as you can, and within:

  • 1 month of receiving the request, in normal circumstances
  • 3 months of receiving the request, if it's complex or you get several requests from the same person (though you have to inform them of the extension within 1 month)

You'll likely find it more difficult to respond to requests over the summer holidays, so read our steps below to help you meet your deadlines.

Make use of the staff who are working

If your DPO doesn't work over the summer, you can ask a member of staff who is to help you respond to requests. But do alert your DPO, if a request does come