DSAR
Data Subject Access Request — a formal request from an individual to access the personal data an organisation holds about them.
Full Definition
A Data Subject Access Request (DSAR) is a formal request made by an individual exercising their right to access personal data. Under GDPR, organisations must respond within 30 days (extendable to 3 months), providing a copy of the data, the purposes of processing, categories of recipients, retention periods, and information about other data subject rights. Under CCPA, businesses have 45 days. Under India's DPDP Act, the right includes access to a summary of personal data and processing activities. DSARs can encompass other rights too — deletion, correction, portability, and objection requests are sometimes grouped under the DSAR umbrella.
Related terms
Right to Access
A data subject's right to obtain confirmation of whether their personal data is being processed and to receive a copy of it.
Data Subject
An identified or identifiable natural person whose personal data is being processed.
Right to Erasure
An individual's right to have their personal data deleted ('right to be forgotten') in certain circumstances.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.