Following an ECJ decision, the ICO has updated its guidance on the timescales for responding to a subject access request (SAR), and other individual rights. The ICO has now confirmed that the clock starts running on the day of receipt of the SAR so, for example, a SAR that is received on 1 September must be responded to by 1 October (rather than 2 October as previously thought).