The General Data Protection Regulation - a practical guide for trade unionists (March 2018)

Chapter 3

Timescale for providing information

[ch 3: page 24]

The data controller must provide this information:

• within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data is processed;

• if the personal data is to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or

• if disclosure to another recipient is envisaged, at the latest when the personal data is first disclosed.


This information is copyright to the Labour Research Department (LRD) and may not be reproduced without the permission of the LRD.