Data Subject Request (DSR)

A Data Subject Request, or DSR, is a request from an individual exercising one or more privacy rights concerning their personal information.

Depending on the applicable law, a DSR may involve access, deletion, correction, portability, restriction, objection, or opting out of certain data uses.

DSR fulfillment often requires coordination across multiple systems and teams because an individual's data may exist in SaaS platforms, databases, communication systems, vendors, and other locations.

Organizations should maintain repeatable processes for verifying requesters, locating relevant data, meeting statutory deadlines, documenting decisions, and maintaining evidence of fulfillment.