Timescale for providing information
[ch 3: page 24]The data controller must provide this information:
• within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data is processed;
• if the personal data is to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or
• if disclosure to another recipient is envisaged, at the latest when the personal data is first disclosed.