A DSAR (Data Subject Access Request) is a request made by an individual to see what personal data an organisation holds about them and how it is being used. This can include emails, records, messages, or system data where the person can be identified.

 

Organisations are legally required to respond to these requests within a set timeframe and in a clear, understandable way.

 

A DSAR allows people to:

​

• Understand what personal information is held about them

• Check that the information is accurate and lawfully used

• See who the data has been shared with

 

For organisations, handling a DSAR means finding personal data across systems, reviewing it carefully, and responding in a compliant and timely manner.