In Europe the GDPR states that businesses have a single calendar month to respond to you, either with the data, how to easily get them, or a damn good reason wh

In Europe the GDPR states that businesses have a single calendar month to respond to you, either with the data, how to easily get them, or a damn good reason why they couldn't comply in time. It happened to me once that a business hasn't responded in time, but after I sent them a follow up that they are breaking the law by ignoring my request, they responded right away the next day. I also only sent the requests to the biggest offenders, so the sample is small. 30-90 days is therefore possibly the period one should expect to wait to get a response, even though more than approx. 30 days is illegal.