Complaining to the Data Protection Commission is very slow and cumbersome at present. They tell me they are taking 3 months to deal with complaints due to high volumes and lack of staff to cope with it.(posted 8693 days ago)Better to tackle the Nationwide. The 40 days does incidentally start from the date they are satisfied it really is you requesting the information. They can delay matters by seeking documentary proof of identity and many organisations now do this, to be sure they are releasing information to bona fide individuals and not mischief makers (foe example: divorcing couples stirring up trouble for one another by pretending to be the data subject to get information they can use against the other)