The Trust has one calendar month to respond to Subject Access Requests. However, the response time can be extended by a further two calendar months, giving three months in total to respond, where the request is complex or where several requests have been received from the individual relating to the individual's Data Protection rights.
If an extension is justified, the Trust must write to the individual within one calendar month of receipt of the request to explain why the extra time is needed.
Whilst the complexity of a request must be determined on a case-by-case basis, the Trust has issued guidance on the circumstances/factors to consider as reasons to declare a request complex.
If in doubt, advice should be immediately sought from the Information Governance Team.