31. Compliance with data access request

Subject to other rules, a data user must comply with a data access request within twenty-one days of receiving it. If it cannot, it must tell the requestor this in writing, with reasons, before that time ends. It must also comply as far as it can by then. It must fully comply within fourteen days after that time ends.

Summary · Drafted with AI, checked against the official text on 30 Sep 2026.