Consumer data request - statutory deadline

Type the state and the date the request landed. Get the statutory due date, the extension date, the cure period and the penalty exposure.

Respond by
Days leftdays
Status
Acknowledge receipt by
Latest date if you notify of an extension
Appeal window
Cure period
Statutory maximum
Exposure across your open queue
Overdue in a state where the cure period is gone?
A $60 key adds .csv export of your calculated request log and browser reminders that fire before each statutory due date.
$60 once · one licence key per person or team seat · 7-day full refund. Outside privacy counsel intake review of a single consumer rights request is commonly quoted as a four-figure engagement per matter. Get the full version — $60
Per-state response clock
Iowa gives 90 calendar days, the other eight states give 45 - the tool applies the right window instead of the 45-day rule everyone assumes.
Request type changes the clock
A California opt-out of sale or sharing runs on 15 business days, not 45 calendar days, and an appeal of a denial runs its own 45 or 60 day window.
Cure period status for 2026
Colorado and Connecticut cure periods have expired and California has none, so in those states the first missed deadline is directly enforceable.
Per-violation exposure across your queue
Multiplies the state's statutory maximum per violation by the number of open requests you are holding from that state.
Deadline reminders and CSV export
The paid key exports your calculated request log as .csv and schedules a browser reminder ahead of each statutory due date.

Get the complete version $60

This page is the working piece. The full pack has everything below.

Type the state and the date the request landed. Get the statutory due date, the extension date, the cure period and the penalty exposure.

Outside privacy counsel intake review of a single consumer rights request is commonly quoted as a four-figure engagement per matter.

Buy the full version — $60

Questions people ask

What does the DSAR Deadline Clock actually do?

You enter the state, the date the request arrived and the request type. It returns the statutory response date, the acknowledgement date where one is required, the latest date an extension can buy you, the appeal window, whether a cure period still exists in that state, and the statutory maximum per violation across your open queue.

Who is this for?

Privacy ops staff, compliance managers and in-house counsel at US companies that receive consumer data requests and track them in a spreadsheet rather than a six-figure privacy platform. It is built for the person who has to answer a Texas request and an Iowa request in the same week and cannot mix up the two clocks.

Why not just ask a chatbot or use a free deadline table?

Because the windows moved and the tables did not. Indiana and Kentucky took effect 1 January 2026; Iowa allows 90 days to respond where Texas allows 45. A general model answers 45 days for every state and misses that California opt-outs run on 15 business days, that Colorado and Connecticut cure periods have expired, and that appeals start their own clock.

What is free and what does the key add?

Every calculation is free forever: all 9 states, all 5 request types, extension dates, cure status and exposure, with no key, no cap and no watermark. The $60 key adds two things on a different axis: .csv export of your calculated request log, and browser reminders scheduled ahead of each statutory due date.

What would this cost done by a person?

Outside privacy counsel intake review of a single consumer rights request is commonly quoted as a four-figure engagement per matter, and privacy request management platforms are sold as annual seats. This is a one-time twenty-nine dollar key on top of a calculator that stays free.

Ask about this tool

One question, answered by the person who built it. Your email only if you want the answer sent.

Want the full version?
Enter your email and we send the download link.
ENDEJAESPT

Find a tool