A Request Not Narrowed Without Agreement

Where the organisation asks the person to specify what they want, it does not treat the request as withdrawn or narrowed if the person does not reply.

Criterion: D7
Level: Level 2
Domain: Completeness and Scope
Reflects: Article 12(2)

Intent

Asking a person to narrow a request is allowed. Treating their silence as a withdrawal turns a question into a way of closing the request without answering it.

How to test it

An assessor scores the criterion against a single response:

Score 2: The organisation asked the person to specify what they wanted, and answered the original request in full when they did not reply.
Score 1: The organisation answered a narrowed version of the request without the person having agreed to narrow it.
Score 0: The organisation closed the request, or treated it as withdrawn, because the person did not reply.
Not applicable: The organisation did not ask the person to specify what they wanted.

The law it reflects

This criterion reflects Article 12(2) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See D7 in context in the full standard.