An Extension Explained
Where the organisation extends the time limit, it states why the extension is needed.
Intent
An extension has conditions attached: the request has to be complex, or one of several from the same person. Stating the reason is what lets the person judge whether those conditions were met.
How to test it
An assessor scores the criterion against a single response:
- Score 2
- The organisation gave a reason for the extension that refers to this request, such as its complexity or the volume of data.
- Score 1
- The organisation gave a general reason, such as high demand, that is not about this request.
- Score 0
- The organisation extended the time limit without giving a reason.
- Not applicable
- The organisation did not extend the time limit.
The law it reflects
This criterion reflects Article 12(3) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.
See B3 in context in the full standard.