Typically, you have around 30 to respond to a data subject once you receive such a request, but the exact timeframe varies depending on the specific data protection laws in your jurisdiction.