Privacy requests
Deadlines and statuses
How Privacyboard counts the GDPR one-month deadline, the two-month extension and the identity check pause, and what each request status means.
The GDPR requires you to respond to a request without undue delay and at the latest within one month of receiving it. Privacyboard counts the date for you.
#How the deadline is counted
- Standard deadline. One calendar month from the date the request was received.
- Extension. For complex requests or a large number of them, the period can be extended by up to two further months. You must tell the person within the first month and explain why. Recording an extension in Privacyboard sets the new date and keeps the reason.
- Identity check. If you have reasonable doubts about who is asking, you can ask for more information (Article 12(6)). The status becomes Awaiting identity, the deadline is paused, and the period runs from the moment you confirm identity.
Dates are computed in UTC and shown as plain days, so they never shift with time zones.
#Statuses
| Status | Meaning |
|---|---|
| New | Received, not yet acknowledged. |
| In progress | Acknowledged or being worked on. |
| Awaiting identity | You asked for proof of identity. The deadline is paused. |
| Completed | Answered. The outcome is recorded: fulfilled or refused. |
#What the overview shows
- Overdue requests, past the deadline.
- Due soon requests, within seven days.
#Free of charge
Information and actions are free of charge, unless requests are manifestly unfounded or excessive (Article 12(5)).
#FAQ
#How long do I have to answer a GDPR request?
One month from receiving it. For complex requests or a large number of them you can extend by up to two further months, as long as you tell the person within the first month and explain why.
#Does the deadline start when I verify identity?
If you have reasonable doubts about identity and ask for more information, Privacyboard counts the period from the moment you confirm identity. The request is shown as waiting until then.
Privacyboard is a guidance tool, not legal advice. This page describes what the product does today. Found something unclear or out of date? Write to antoine@unmake.io.