What Happens If You Ignore a DSAR?
A data subject has sent you a GDPR request. You're thinking about ignoring it. Here's exactly what happens if you do — and why it's always better to respond.
🚨 The Reality
Ignoring a data subject access request doesn't make it go away. In fact, it typically makes things much worse. Here's the typical escalation path:
⚖ Potential Consequences
Financial penalties
Fines up to €20 million or 4% of annual global turnover (whichever is higher)
Enforcement notices
Regulator can order you to respond, change practices, or stop processing data
Reputation damage
Fines are often publicised, damaging customer trust
Legal action
Data subjects can sue for compensation for distress
Wasted time
Dealing with regulators takes far more time than just responding
Increased scrutiny
Once on regulator's radar, you may face ongoing audits
📈 Real Enforcement Examples
The Irish DPC's enforcement record shows how seriously DSAR compliance is taken:
Source: DPC Annual Report 2024
✓ What To Do Instead
💡 It's never too late to respond
Even if you've missed the deadline, responding late is always better than not responding at all. Regulators may take a late but complete response into account (GDPR Article 83(2)).
-
Respond now Even a late response is better than no response
-
Apologise for delay Acknowledge the delay and explain briefly
-
Provide complete response Make sure your response is thorough and correct
-
Improve your process Put systems in place to handle future requests properly
Don't let DSARs pile up
SAR Portal helps you respond correctly and on time — with deadline tracking, email verification, AI-suggested redaction for your review, and an audit trail of every step.
Try SAR Portal FreeEvery free trial gives you Pro features for 14 days. No credit card required.
Handle DSARs the right way
SAR Portal guides you through every step of GDPR compliance — from request intake to final response.