https://ico.org.uk/media/action-weve...n-20220112.pdf
By no later than 31 December 2022, to have informed the 7,753 data subjects referred to at paragraph 22, who have made a subject access request, whether or not the controller is processing personal data concerning that data subject, and if so provide that data subject with a copy of their data, subject only to the proper application of any exemption from, or restriction or adaptation of, the right of subject access provided for in or by virtue of the EU or UK GDPR or DPA.
By no later than 31 December 2022, to have informed the 7,753 data subjects referred to at paragraph 22, who have made a subject access request, whether or not the controller is processing personal data concerning that data subject, and if so provide that data subject with a copy of their data, subject only to the proper application of any exemption from, or restriction or adaptation of, the right of subject access provided for in or by virtue of the EU or UK GDPR or DPA.