Common deadlines for answering a DSR
Data Subject Access Requests have different deadlines established by the applicable regulations for each jurisdiction. Here is a list of the deadlines for the regulations we cover.
| Jurisdiction | Regulation | Deadline |
|---|---|---|
| Argentina | PDPL | 5 days - right to access 10 days - right to rectify, update, or delete |
| Australia | Privacy Act 1988 | 30 days |
| Brazil | LGPD | 30 days 15 days for access requests |
| Canada | PIPEDA | 30 days |
| Canada - Alberta | PIPA-AB | 45 days 30 days for access requests |
| Canada - British Columbia | PIPA-BC | 30 days + 30 days |
| Canada - Quebec | Quebec Law 25 | 30 days |
| China | PIPL | 30 days |
| Colombia | Law 1581 | Not defined |
| Ecuador | LOPDP | Not defined |
| European Union | GDPR | 30 days + 30 days |
| European Union | ePrivacy Directive | Not defined |
| France | CNIL | 30 days + 30 days |
| Germany | BDSG | 30 days |
| Indonesia | PDP | 3 days |
| Ireland | DPC | 30 days + 30 days |
| Israel | PPL | Not defined |
| Japan | APPI | 30 days |
| Mexico | LFPDPPP | 15 days |
| Nigeria | NDPB | Not defined |
| Saudi Arabia | PDPL | 30 days |
| Singapore | PDPA | Not defined |
| South Africa | POPIA | 30 days |
| South Korea | PIPA | 10 days |
| Spain | AEPD | 30 days + 30 days |
| Thailand | PDPA | 30 days |
| Turkey | KVKK | 30 days |
| United Kingdom | UK GDPR | 30 days + 30 days |
| Uruguay | U-PDPL | 5 days |
| USA - California | CCPA/CPRA | 45 days + 45 days |
| USA - Colorado | CPA | 45 days |
| USA - Nevada | NPL | 60 days + 30 days |
| USA - Utah | UCPA | 45 days + 45 days |
| USA - Virginia | VDCPA | 45 days 60 days for appeal |