LRD guides and handbook March 2018

The General Data Protection Regulation - a practical guide for trade unionists

Chapter 3

Timescale for providing information

[ch 3: page 24]

The data controller must provide this information:

• within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data is processed;

• if the personal data is to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or

• if disclosure to another recipient is envisaged, at the latest when the personal data is first disclosed.