I missed the 30-day DSAR deadline — what happens now?

You're now in breach of GDPR Article 12, but don't panic — responding late is always better than not responding. The data subject may complain to the Data Protection Authority, but regulators typically look more favourably on organisations that eventually comply, especially if you respond promptly, apologise for the delay, and provide a complete response.

Should I still respond to a DSAR after the deadline has passed?

Yes, absolutely. Respond immediately. A late response shows you take data protection seriously and can prevent a complaint from escalating. Include an apology for the delay, provide a complete response with all requested data, and ensure everything is properly redacted. Document your response carefully for your records.

Will I get fined for missing a DSAR deadline?

Not automatically. The data subject would need to complain to the Data Protection Authority, which would then investigate. Factors regulators consider include: how late the response was, whether you eventually responded properly, the reason for the delay, and whether this is a pattern. First-time minor delays with eventual compliance often result in warnings rather than fines.

How do I prevent missing DSAR deadlines in future?

Set up a proper DSAR handling process: designate a responsible person, create a central log for all requests, set calendar reminders for deadlines, use DSAR management software to track progress, and train staff to recognise and escalate DSARs immediately. Most missed deadlines happen because the request wasn't logged or tracked properly.

Missed Your DSAR Deadline? Here's What to Do Now

Don't panic. While missing the deadline is a breach, responding late significantly reduces your risk. Regulators look more favourably on organisations that eventually comply.

Start Late Response Now See Recovery Steps

Important: A late response is ALWAYS better than no response. Most regulators will consider a delayed but thorough response as a mitigating factor if a complaint is made.

Why Responding Late Still Matters

✓

Reduces Complaint Risk

Data subjects are less likely to complain to regulators if they eventually receive their data.

✓

Shows Good Faith

Regulators view late compliance more favourably than total non-compliance.

✓

Limits Damages

In civil claims, demonstrating eventual compliance limits potential compensation.

✓

Prevents Escalation

A response now prevents the situation from getting worse with each passing day.

Your Late Response Action Plan

Follow these steps to respond as quickly as possible

Respond Immediately

Start the response process right now. Every additional day of delay makes the situation worse.

Acknowledge and Apologise

Contact the requester to acknowledge the delay. A brief, sincere apology goes a long way.

Provide a Complete Response

Make sure your late response is thorough and correct. A rushed, incomplete response makes things worse.

Document Everything

Keep detailed records of your response process. This evidence protects you if the regulator investigates.

Fix Your Process

Put systems in place to ensure this doesn't happen again. Regulators want to see improvement.

DSAR Response Guides

In-depth guides to help you respond correctly

📖

Start Your Late Response Now

The sooner you respond, the better. SAR Portal helps you respond correctly, even when you're behind.

Start Free Trial

14-day free trial. No credit card required. Cancel anytime.