Skip to main content
All glossary terms

Privacy & data

DSAR (Data Subject Access Request)

A data subject access request (DSAR) is a request by a person to exercise a data-related right, commonly to obtain access to personal information. The available right, response process, and terminology depend on the privacy framework and the facts of the request.

Also known as DSAR, data access request.

Why it matters in practice

Handling a request typically involves intake, identity checks, locating records, applying relevant exceptions, and documenting the response. Teams need a clear route between service staff, system owners, and reviewers so information can be found without over-disclosing it. A DSAR process should not assume that every request has the same legal basis.

Example

A support agent routes an access request to the privacy queue, where the team records the systems searched and the decision made about the response.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.