Request from an individual to access the personal data an organisation holds about them.
A Data Subject Access Request (DSAR) is a request from an individual to receive a copy of the personal data you hold about them and information about how it's processed. DSARs must be responded to within one month (extendable in complex cases). Organisations must provide the data free of charge (with limited exceptions). DSARs can be resource-intensive, especially for organisations with data spread across multiple systems.
Why It Matters
The DSC Perspective:
DSARs are a legal right you must honour. Have processes to handle them efficiently—know where personal data is stored and be able to retrieve it within legal timeframes.