What is a DSAR?
Under the GDPR any individual whose personal data is obtained, stored or processed by an organization can make a request to that organization to obtain a copy of their information. This is known as a DSAR, and the right to access is one of the most powerful rights afforded to individuals under the GDPR.
Awareness amongst individuals of their right to access their own information is increasing, therefore organizations need to have robust procedures in place to be able to respond to DSARs.
Unsure of how to respond to a DSAR ?
Here’s our five-step DSAR lifecycle for responding to DSARs: