{ "name": "sarbuilder.co.uk Sar Statutory Rules", "title": "Sar Statutory Rules", "url": "https://sarbuilder.co.uk/datasets/sar-statutory-rules/", "csv": "https://sarbuilder.co.uk/datasets/sar-statutory-rules.csv", "markdown": "https://sarbuilder.co.uk/datasets/sar-statutory-rules/index.md", "computed_at": "2026-10-31", "license": "https://sarbuilder.co.uk/terms", "headline": "The Sar Statutory Rules carries 2 published figures read from 2 sources' own pages, from 14 to 40 day, read 24 October 2026.", "quotes": [ "The Sar Statutory Rules carries 2 published figures read from 2 sources' own pages, from 14 to 40 day, read 24 October 2026.", "3 of the 24 named sources read in full publish a figure; 21 publish none, read 24 October 2026." ], "citation": "\"sarbuilder.co.uk Sar Statutory Rules\", updated 2026-10-31, https://sarbuilder.co.uk/datasets/sar-statutory-rules/.", "changed_since": null, "national": { "unit": "day", "n": 2, "median": 27, "min": 14, "max": 40, "p25": null, "p75": null, "mean": 27, "units": { "day": 2, "month": 2 }, "published_sources": 3, "named_sources": 24, "read_sources": 24, "not_published": 21, "published_share": 0.125 }, "by_axis": {}, "rows": [ { "source": "Data Protection Act 2018 Schedule 2 (exemptions)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/2", "figure": "40 days", "value": 40, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "if earlier, before the end of the period of 40 days beginning with the announcement of the results.", "source_class": "primary-government", "text_sha256": "305047965b3faaa39722b05fadef181d614bdb67889d4d227c87e42083638bc0" }, { "source": "ICO: a guide to the data protection exemptions", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/exemptions/a-guide-to-the-data-protection-exemptions/", "figure": "14 days", "value": 14, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "If there is a question as to whether you need to comply with a subject access request in this situation, you must inform the Principal Reporter within 14 days of the question arising.", "source_class": "primary-government", "text_sha256": "c3598bd9d9b81c9de8cb379e1be3cff1e7977f262ea3f5f0daa2b940b99fa338" }, { "source": "ICO: a guide to subject access", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/a-guide-to-subject-access/", "figure": "one month", "value": 1, "unit": "month", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "In most circumstances, you cannot charge a fee to deal with a request. You must respond without undue delay, and within one month of receipt of the request.", "source_class": "primary-government", "text_sha256": "f8a685685829a704f862a3f170b839071244fbd022effaa11f32c239331c7d61" }, { "source": "ICO: a guide to subject access", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/a-guide-to-subject-access/", "figure": "two months", "value": 2, "unit": "month", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "You may extend the time limit by up to a further two months where necessary, if the request is complex or you receive a number of requests from the person.", "source_class": "primary-government", "text_sha256": "f8a685685829a704f862a3f170b839071244fbd022effaa11f32c239331c7d61" }, { "source": "ICO: a guide to subject access", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/a-guide-to-subject-access/", "figure": "one month", "value": 1, "unit": "month", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "If you do extend the time limit, you must let the person know and explain why within one month of receiving the request.", "source_class": "primary-government", "text_sha256": "f8a685685829a704f862a3f170b839071244fbd022effaa11f32c239331c7d61" }, { "source": "Data Protection Act 2018 Schedule 2 (exemptions)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/2", "figure": "5 months", "value": 5, "unit": "month", "vat": null, "axis": {}, "retrieved_at": "2026-10-24", "quote": "before the end of the period of 5 months beginning when the question arises, or if earlier, before the end of the period of 40 days beginning with the announcement of the results.", "source_class": "primary-government", "text_sha256": "305047965b3faaa39722b05fadef181d614bdb67889d4d227c87e42083638bc0" } ], "not_published": [ { "source": "Access to Health Records Act 1990", "url": "https://www.legislation.gov.uk/ukpga/1990/23/contents", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "Data (Use and Access) Act 2025", "url": "https://www.legislation.gov.uk/ukpga/2025/18/contents", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "DPA 2018 s.167 (compliance orders)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/167", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "DPA 2018 s.45 (right of access, law enforcement processing)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/45", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "DPA 2018 s.45 as enacted", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/45/enacted", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "DPA 2018 Schedule 3 part 2, serious-harm exemption (health data)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/3/part/2/crossheading/exemption-from-article-15-of-the-gdpr-serious-harm", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "DSIT factsheet: Data (Use and Access) Act 2025, UK GDPR and DPA", "url": "https://www.gov.uk/government/publications/data-use-and-access-act-2025-factsheets/data-use-and-access-act-factsheet-uk-gdpr-and-dpa", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "EDPB Guidelines 01/2022 on the right of access", "url": "https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2022/guidelines-012022-data-subject-rights-right_en", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK published subject access request procedure", "url": "https://www.gov.uk/government/publications/subject-access-request-procedure/subject-access-request-procedure", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK: data protection, your rights", "url": "https://www.gov.uk/data-protection", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK: get a copy of your police records", "url": "https://www.gov.uk/copy-of-police-records", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO right of access guidance", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO: can the right of access be enforced?", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/can-the-right-of-access-be-enforced/", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO: how do we recognise a subject access request?", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/how-do-we-recognise-a-subject-access-request-sar/", "retrieved_at": "2026-10-24", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO: make a subject access request (public)", "url": "https://ico.org.uk/for-the-public/make-a-subject-access-request/", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO: subject access Q&As for employers", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/subject-access-request-q-and-as-for-employers/", "retrieved_at": "2026-10-24", "reason": "every candidate on the page was refused" }, { "source": "UK GDPR Article 12 (transparency, time limits and fees)", "url": "https://www.legislation.gov.uk/eur/2016/679/article/12", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "UK GDPR Article 15 (right of access), legislation.gov.uk", "url": "https://www.legislation.gov.uk/eur/2016/679/article/15", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "NHS England: subject access requests", "url": "https://www.england.nhs.uk/long-read/subject-access-requests-sar/", "retrieved_at": "2026-09-26", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO right of access guidance (PDF, versioned)", "url": "https://ico.org.uk/media2/5txar1ff/right-of-access.pdf", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "the authority per rule", "url": "https://www.legislation.gov.uk/ukpga/2018/12/contents", "retrieved_at": "2026-10-31", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.legislation.gov.uk/ukpga/1990/23/contents", "label": "Access to Health Records Act 1990", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2025/18/contents", "label": "Data (Use and Access) Act 2025", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/2", "label": "Data Protection Act 2018 Schedule 2 (exemptions)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/167", "label": "DPA 2018 s.167 (compliance orders)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/45", "label": "DPA 2018 s.45 (right of access, law enforcement processing)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/45/enacted", "label": "DPA 2018 s.45 as enacted", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/3/part/2/crossheading/exemption-from-article-15-of-the-gdpr-serious-harm", "label": "DPA 2018 Schedule 3 part 2, serious-harm exemption (health data)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/publications/data-use-and-access-act-2025-factsheets/data-use-and-access-act-factsheet-uk-gdpr-and-dpa", "label": "DSIT factsheet: Data (Use and Access) Act 2025, UK GDPR and DPA", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2022/guidelines-012022-data-subject-rights-right_en", "label": "EDPB Guidelines 01/2022 on the right of access", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/publications/subject-access-request-procedure/subject-access-request-procedure", "label": "GOV.UK published subject access request procedure", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/data-protection", "label": "GOV.UK: data protection, your rights", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/copy-of-police-records", "label": "GOV.UK: get a copy of your police records", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/", "label": "ICO right of access guidance", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/a-guide-to-subject-access/", "label": "ICO: a guide to subject access", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/exemptions/a-guide-to-the-data-protection-exemptions/", "label": "ICO: a guide to the data protection exemptions", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/can-the-right-of-access-be-enforced/", "label": "ICO: can the right of access be enforced?", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/how-do-we-recognise-a-subject-access-request-sar/", "label": "ICO: how do we recognise a subject access request?", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-the-public/make-a-subject-access-request/", "label": "ICO: make a subject access request (public)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/subject-access-request-q-and-as-for-employers/", "label": "ICO: subject access Q&As for employers", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/12", "label": "UK GDPR Article 12 (transparency, time limits and fees)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/15", "label": "UK GDPR Article 15 (right of access), legislation.gov.uk", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.england.nhs.uk/long-read/subject-access-requests-sar/", "label": "NHS England: subject access requests", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/media2/5txar1ff/right-of-access.pdf", "label": "ICO right of access guidance (PDF, versioned)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/contents", "label": "the authority per rule", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 3 of the 24 named sources that could be read published a usable figure; 21 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in day (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 13 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per rule per regime (UK GDPR as it has effect, DPA 2018 with the Data (Use and Access) Act 2025 amendments, the law-enforcement regime in Part 3, the health-records route, and the EU regime for an EEA controller): the obligation, the number in it (one month, two further months, zero fee), the section it comes from and the date it took effect - and, across them, the two things nobody publishes as a table: which of the twenty-odd exemptions actually reach Article 15 and which do not, and what CHANGED at each amendment, so a requester whose refusal cites an old rule can see it", "embed": "

14 to 40 day

2 published figures, Sar Statutory Rules, across 2 sources, read 24 October 2026

Source: sarbuilder.co.uk Sar Statutory Rules
" }