What is a DSAR?
A DSAR is a data subject access request.
Individuals have rights with respect to their own personal information. The general term for these rights is “access”. An individual has a right to know what information an organization related to that individual. An individual’s right to access can include the right to update, correct or delete information, and the right to be forgotten.
Organizations have obligations to implement mechanisms for individuals to assert their rights to information. Organizations should have a robust and efficient process for responding to DSARs.
Responses to DSARs must be made within time limits (E.g., 30 days under the GDPR). Prepare ahead of time so that responses can be timely.