DSAR Deadline Calculator
Enter the date you received a data subject request and the applicable regulation, and instantly calculate your response deadline, including extensions and business day rules.
Tool details
About this tool
Enter the date you received a data subject request, pick the applicable regulation, and get the response deadline — with extensions, holidays and business-day rules handled for you.
What you'll get
- A calendar date for the mandatory response.
- A rendered extension path when the regulation allows one.
- A link to the TruePrivacy DSR intake workflow that enforces the deadline automatically.
How it works
- GDPR: 30 calendar days from receipt, extendable to three months for complex or numerous requests (Article 12(3)).
- CCPA: 45 calendar days, extendable once by 45 days with written notice.
- DPDP Act: as set by the Fiduciary's published grievance redressal period under the DPDP Rules 2025.
- PDPA: as soon as reasonably possible — the calculator uses 30 days as the industry working target.
Based on
- GDPR Article 12(3) + EDPB guidelines on data subject rights.
- CCPA § 1798.130(a)(2) + CPPA regulations.
- PDPA § 21 and PDPC advisory guidelines.
- DPDP Act § 11 + DPDP Rules 2025.
Frequently asked questions
What counts as 'receipt' for the deadline clock?+
The day you receive the request in a form that lets you process it. If identity verification pushes that date out, document the extension — many authorities accept 'received when verified' but only when the verification request was itself prompt.
Do weekends and public holidays extend the deadline?+
GDPR runs on calendar days — weekends count. CCPA is the same (calendar days). PDPC guidance accepts practical working-day accommodation when the final day falls on a Singapore public holiday.
What's the right extension trigger?+
Complexity, volume, or legitimate operational constraints. Write the extension letter the same day you decide — document the reason, the new deadline and the subject-contact log entry.
How does TruePrivacy enforce the deadline?+
Every DSR you accept is stamped with the calculated deadline. The autopilot sweeps overdue requests, escalates to the DPO at the 80% mark, and files a timing log in the audit trail.
Need more than a free tool?
TruePrivacy is a full privacy operations platform. Automate DSRs, consent, vendor risk, and breach response.
Free 14-day trial · No credit card required · Setup in minutes