Following a ruling by the Court of Justice of the European Union (CJEU), we have updated our guidance on timescales for responding to a subject access request (SAR), as well as other individual rights requests. The timescale has now changed to reflect the day of receipt as ‘day one’, as opposed to the day after receipt. For example, a SAR received on 3 September should be responded to by 3 October. We have updated our Individual Rights pages to reflect this ruling.