Timescale for providing information

The data controller must provide this information:

• within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data is processed;

• if the personal data is to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or

• if disclosure to another recipient is envisaged, at the latest when the personal data is first disclosed.