@satouru @ulu_mulu The one month rule is in article 12(3):
“The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request.”