When is the deadline for controller's acknowledgement of a data subject complaint?
The catalogue records a 30 days period from Receipt of the complaint by the controller. This draft page remains free only until its source, worked example and limits are reviewed.
Source link required
This page is in preparation. It does not offer an automated deadline or a paid record until the missing source or calculator evidence is complete.
In preparation
The existing catalogue does not yet have a registered adapter or source evidence for this exact question. It remains available as a public preparation page only.
Example pending review
A separately reviewed fixture is required before this question can become indexable. The page does not present an unreviewed output as an example.
Calculation basis and source
- Period
- 30 days
- Trigger
- Receipt of the complaint by the controller
- Counting
- The encoded calculator method must be independently documented before publication.
- Rollovers and holidays
- Holiday, closure and order treatment must be independently documented before publication.
This route remains in preparation until a pinpoint official source is recorded.
- No extension power. The acknowledgement duty is expressed as an absolute 30 day obligation. The separate substantive duty in s.164A(4) - to take appropriate steps to respond and to inform the complainant of the outcome - carries no fixed period at all, only "without undue delay", so it cannot be diarised to a date.
- CURRENCY: this is very new. Sections 164A and 164B were inserted by DUAA 2025 s.103(2) and came fully into force on 19 June 2026 under SI 2026/82, reg 3(a) - roughly five weeks before this catalogue was compiled. Note the counting: 30 calendar days "beginning when the complaint is received", so the day of receipt counts as day one. It is 30 days, not one month, and not 30 worki