Data Subject Access Request (DSAR)

A Data Subject Access Request, or DSAR, is a request made by an individual to obtain information about the personal data an organization holds and processes about them.

Under the GDPR, the right of access allows individuals to obtain a copy of their personal data and information about purposes of processing, categories of data, recipients, retention, and other relevant details.

Responding to a DSAR may require organizations to locate data across many systems, verify the requester's identity, review information for exemptions or third-party data, and prepare a response.

DSAR automation can help organizations coordinate this work while maintaining appropriate review and auditability.