Free Tool · AI Governance
DSAR Deadline Calculator
Enter your request receipt date, select your jurisdiction, and receive the exact response deadline with pause adjustments, bank holiday corrections, and a downloadable PDF report. No account required. Nothing is stored or transmitted.
- Covers UK GDPR (including DUAA 2025 pause rights), EU GDPR, and Singapore PDPA
- Runs entirely in your browser — no dates or request details are transmitted or stored
- Generates a downloadable PDF case reference sheet
- Applies bank holiday corrections for England & Wales, Scotland, and Singapore
Your answers are used only to calculate your deadline. No dates, request details, or personal information are transmitted to any server. Any PDF report you download is generated in your browser and is not stored on any server. If you choose to enter your email address in the newsletter form, that information is stored separately and only used to send you the updates you asked for.
What this tool collects
This tool collects your assessment answers and calculates a statutory response deadline. All of this happens in your browser. Your answers are not sent to a server for processing.
What is not collected
Your IP address is not collected or stored. Your company name is not collected unless you choose to enter it when downloading a PDF report. Your email address is not collected unless you choose to provide it to receive updates.
PDF reports
If you choose to download a PDF report, it is generated entirely within your browser using your answers. The report is not sent to or stored on any server. Once you download it, the data stays with you.
Third parties
Your data is not sold to third parties. Your data is not shared with advertising networks. Your data is not used for any purpose other than those described here.
How the deadline is calculated
The deadline is calculated using calendar month arithmetic specific to each jurisdiction. Under UK GDPR, the clock starts on the day of receipt and the deadline falls one calendar month later. Under EU GDPR, the clock starts the day after receipt (EDPB Guidelines 01/2022, para 39). Under Singapore PDPA, the deadline is 30 calendar days from the day of receipt, treating day of receipt as day 1.
Pauses are applied as additive day counts. Under UK GDPR (DUAA 2025 Part 5, in force 5 February 2026), the clock pauses when identity verification or clarification is requested and resumes when the response is received. Under EU GDPR there is no statutory mid-clock pause for clarification (EDPB Guidelines 01/2022, para 54). Singapore PDPA has no pause mechanism.
If the calculated deadline falls on a weekend or bank holiday, it moves forward to the next working day. Bank holidays: England and Wales GOV.UK list for UK GDPR; Singapore Ministry of Manpower list for PDPA. Covers 2024–2027. For dates outside this range, verify the bank holiday adjustment manually.
Which data protection law applies to this request?
Select the regime that governs this DSAR. This determines the clock rules, pause rights, and deadline calculation. If you are unsure, select UK GDPR for UK-registered organisations or EU GDPR for organisations established in EU member states.
Nothing is transmitted from your browser.
When was the request received?
Enter the date the organisation received the DSAR. This is the date it arrived in the organisation's hands — not when it was read, acknowledged, or logged. For requests received by post, use the date of delivery, not the postmark date.
Nothing is transmitted from your browser.
What type of access request is this?
Most DSARs are standard requests from individuals. Select the type that best describes this request. This affects the plain-English output notes but does not alter the statutory deadline calculation.
Nothing is transmitted from your browser.
Was identity verification requested?
Organisations may request reasonable evidence of the data subject's identity before responding, where there is reasonable doubt about who is making the request. This is not a routine step and should be used only where genuinely needed.
Nothing is transmitted from your browser.
Was clarification of the request sought?
Where a request is unclear or very broad, the organisation may ask the data subject for clarification to identify the data they are seeking. This field applies only to UK GDPR. For EU GDPR and Singapore PDPA, the clock does not pause for clarification; an information note is displayed instead.
Nothing is transmitted from your browser.
Has an extension been applied?
An extension of up to two further months may be applied under Art 12(3) UK GDPR / EU GDPR where the request is complex or the number of requests is high. The extension is not automatic — the organisation must notify the data subject within the original one-month deadline. Failure to notify in time means the extension is not valid.
Nothing is transmitted from your browser.
Need help with the full DSAR process?
This calculator gives you the deadline. For a complete DSAR handling workflow with intake, triage, exemption guidance, and response pack generation, get in touch.
Discuss your requirements