I missed the one-month DSAR deadline — what happens now?

You're now in breach of GDPR Article 12, but don't panic — responding late is always better than not responding. The data subject may complain to the Data Protection Authority. Regulators may take a late but complete response into account (GDPR Article 83(2)), so respond promptly, apologise for the delay, and provide a complete response.

Should I still respond to a DSAR after the deadline has passed?

Yes, absolutely. Respond immediately. A late response shows you take data protection seriously and can prevent a complaint from escalating. Include an apology for the delay, provide a complete response with all requested data, and ensure everything is properly redacted. Document your response carefully for your records.

Will I get fined for missing a DSAR deadline?

Not automatically. The data subject would need to complain to the Data Protection Authority, which would then investigate. Factors regulators consider include: how late the response was, whether you eventually responded properly, the reason for the delay, and whether this is a pattern. Besides fines, regulators can use other measures, such as reprimands or orders to comply.

How do I prevent missing DSAR deadlines in future?

Set up a proper DSAR handling process: designate a responsible person, create a central log for all requests, put each deadline in a shared calendar, use DSAR management software to track progress, and train staff to recognise and escalate DSARs immediately. Most missed deadlines happen because the request wasn't logged or tracked properly.

Missed Your DSAR Deadline? Here's What to Do Now

Don't panic. Missing the deadline is a breach, but responding late is better than not responding. Regulators may take a late but complete response into account.

Start Late Response Now See Recovery Steps

Important: A late response is ALWAYS better than no response. Regulators may take a late but complete response into account (GDPR Article 83(2)).

Why Responding Late Still Matters

✓

Reduces Complaint Risk

A requester who receives their data may have less reason to complain to the regulator.

✓

Shows Good Faith

Regulators may consider what you did to put things right when deciding what action to take.

✓

Limits Damages

In a civil claim, showing you eventually complied may help.

✓

Prevents Escalation

A response now prevents the situation from getting worse with each passing day.

Your Late Response Action Plan

Follow these steps to respond as quickly as possible

Respond Immediately

Start the response process right now. Every additional day of delay makes the situation worse.

Acknowledge and Apologise

Contact the requester to acknowledge the delay. A brief, sincere apology goes a long way.

Provide a Complete Response

Make sure your late response is thorough and correct. A rushed, incomplete response makes things worse.

Document Everything

Keep detailed records of your response process. This evidence protects you if the regulator investigates.

Fix Your Process

Put systems in place to ensure this doesn't happen again. Regulators want to see improvement.

DSAR Response Guides

In-depth guides to help you respond correctly

📖

Complete DSAR Guide

Everything you need to know about responding to data access requests under GDPR.

☑

DSAR Response Checklist

Step-by-step checklist covering all phases from receipt to final response.

✏

Redaction Guide

How to properly redact third-party data to avoid causing a data breach.

🚨

Just Received a DSAR?

15-minute action plan for when you first receive a request.

Start Your Late Response Now

The sooner you respond, the better. SAR Portal helps you respond correctly, even when you're behind.

Start Free Trial

Every free trial gives you Pro features for 14 days. No credit card required. Monthly plans cancel anytime.