Data Protection Issues

How Long Does a Microsoft Subject Access Request Take?

Tauseeq Magsi Oct 15, 2026 869 views

Question details

The user is seeking information on the processing time for a Microsoft Subject Access Request and needs to know how to resolve a prolonged delay.

How Long Does a Microsoft Subject Access Request Take?

Product: Microsoft
Device & OS: not provided
Scenario: Submitting a Subject Access Request (SAR) to retrieve personal data from Microsoft.
Observed behavior: The data request has remained unresolved for several months, with repeated requests for clarification but no actual data delivery.

Before you start

Gather your original request details, any provided case numbers, and all past correspondence with the privacy team to reference in your follow-up.

Solution 1Recommended

Escalate via Official Microsoft Privacy Channels

Since public forums cannot access privacy cases, you must follow up through Microsoft's dedicated privacy support to get a status update or escalate the delayed request.

Public support forums are staffed by users and independent advisors who do not have access to Microsoft backend systems or privacy cases. To resolve a delayed Subject Access Request (SAR), you must communicate directly with the official privacy team.

Locate your case number

Find the confirmation email you received when you initially submitted your Subject Access Request to locate your specific case or request number.

Access the Microsoft Privacy portal

Navigate to the official Microsoft Privacy Request channel where you originally submitted your inquiry.

Submit a follow-up inquiry

Open a follow-up communication referencing your exact case number. Clearly outline the initial request date and state that the standard response period has passed.

Clearly define your data scope

In your follow-up, provide a concise summary of the specific account scope and the exact data you are requesting to prevent further clarification delays.

Request a formal escalation

Explicitly ask for an escalation or a management status review due to the months-long delay in processing your data retrieval.

Escalate via Official Microsoft Privacy Channels

Regulatory Deadlines: Under regulations like the GDPR, companies typically have 30 days to respond to a SAR, which can be extended by two months for complex cases. If this period has passed, you may have the right to lodge a complaint with your local data protection authority.

Free Microsoft Office alternative

Looking for a Secure and Private Office Alternative?

If you are concerned about data privacy and are looking for a reliable, lightweight document editor, WPS Office offers robust tools with strict privacy standards. It serves as an excellent, free alternative to Microsoft Office.

1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the installer and follow the simple on-screen instructions to set up the software on your device.
3. Open and edit your files: Launch WPS Office to instantly open, edit, and save your existing Microsoft Office documents with zero compatibility issues.

Fully compatible with Microsoft Word, Excel, and PowerPoint file formats.Strong data protection measures to ensure your local documents remain private.Lightweight software that runs smoothly on almost any device without heavy resource usage.Completely free to download and use for all your everyday productivity needs.

microsoft office alternative - wps office

Frequently Asked Questions

How long should a Subject Access Request (SAR) take legally?

Under standard data protection laws like the GDPR, an organization has one calendar month to respond to a SAR. For highly complex requests, this deadline can be extended by an additional two months, but they must notify you of the delay within the first month.

Can I get an update on my privacy case from Microsoft support forums?

No. Public Microsoft support forums are user-to-user communities. The participants and independent advisors there do not work directly for Microsoft and have no access to user accounts, privacy cases, or backend administrative systems.

What can I do if Microsoft ignores my Subject Access Request?

If your request remains unresolved beyond the legal timeframe and escalations through their official privacy channels fail, you have the right to report the issue to the relevant Data Protection Authority (such as the ICO in the UK) in your jurisdiction.

Microsoft Office Security Issues