A Data Subject Access Request (DSAR) is a legal right provided to individuals under data protection regulations, such as the General Data Protection Regulation (GDPR) in the European Union or the California Consumer Privacy Act (CCPA) in the United States.
A DSAR allows individuals to request access to their personal data that is being collected, processed, and stored by organizations. Individuals have the right to know what personal data is being collected, why it is being collected, and how it is being used.
In addition to the right to access personal data, individuals may also have the right to request the correction or deletion of their personal data, to restrict or object to its processing, and to receive a copy of their data in a commonly used electronic format.
Organisations that collect and process personal data are legally obligated to respond to DSRs within a certain timeframe and provide the requested information or take appropriate action, as required by law.