Art. 12A GDPR Meaning of “applicable time period” In Article 12, “the applicable time period” means the period of one month beginning with the relevant time, subject to paragraph 3. The relevant time” means the latest of the following— when the controller receives the request in question; when the controller receives the information (if any) requested in connection with a request under Article 12(6); make provision varying such an exception as it applies in connection with added processing when the fee (if any) charged in connection with the request under Article 12(5) is paid. The controller may, by giving notice to the data subject, extend the applicable time period by two further months where that is necessary by reason of— the complexity of requests made by the data subject, or the number of such requests. A notice under paragraph 3 must— be given before the end of the period of one month beginning with the relevant time, and state the reasons for the delay. Where the controller reasonably requires further information in order to identify the information or processing activities to which a request under Article 15 relates— the controller may ask the data subject to provide the further information, and the period beginning with the day on which the controller makes the request and ending with the day on which the controller receives the information does not count towards— the applicable time period, or the period described in paragraph 4(a). An example of a case in which a controller may reasonably require further information is where the controller processes a large amount of information concerning the data subject. Prev. Article View All Next Article Further Information This version of the UK GDPR is offered purely as what we hope will be a helpful resource. It does not have the status of law, and should not be relied on as such. Nor do we guarantee it is free from errors. It was originally prepared using a Keeling Schedule made available by the UK Government. Since then, a consolidated version has also been made available on the legislation.gov.uk pages. By virtue of section 3 of the European Union (Withdrawal Act) 2018, the GDPR (Regulation (EU) 2016/679) was retained in United Kingdom law as "direct EU legislation". However, the effect of the Data Protection, Privacy and Electronic Communications (Amendments Etc.) (EU Exit) Regulations 2019, as amended by the Data Protection, Privacy and Electronic Communications (Amendments Etc.) (EU Exit) Regulations 2020, was, from 1 January 2021, immediately to make changes to the retained GDPR, and to refer to it as the "UK GDPR". These pages reflect those changes. This resource includes links to the GDPR recitals. The explanatory notes to the European Union (Withdrawal Act) 2018 confirm that where legislation is converted under section 3, it is the text of the legislation itself which will form part of domestic legislation, and this will include the full text of any EU instrument (including its recitals). Accordingly, recitals will continue to be interpreted as they were prior to the UK’s exit from the EU. They will, as before, be capable of casting light on the interpretation to be given to a legal rule, but they will not themselves have the status of a legal rule. However, it stands to reason that – as the recitals themselves have not been amended – they will in places contain language and references to EU bodies and rules which no longer apply to the UK. In this resource we link Articles of the UK GDPR to the corresponding recitals. In deciding which recitals correspond to which Articles of UK GDPR, we have drawn on the working document of the EU GDPR which the Information Commissioner had previously published in 2017. Downloads Working document of the EU GDPR published 2017 and archived on the National Archives website