The Supreme Administrative Court held that three months is the deadline for deciding a GDPR complaint
In its judgment of 25 August 2026, the full text of the decision in our database shows that the Supreme Administrative Court (NSA) clearly defined the significance of the time limit in Article 78(2) GDPR for proceedings conducted by the President of the Personal Data Protection Office. The three-month period concerns, first and foremost, the handling of the complaint, namely the issuing of an administrative decision, rather than merely providing the data subject with information on the state of the case.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.