Skip to main content
008.010

Subject Access Requests (SARs) / DSARs

The "right to know." Under laws like GDPR, users have a Data Subject Access Request right. This means they can ask you for a complete copy of all data you hold on them. This section explains what's required in your response.

6 questions in this topic

Questions about Subject Access Requests (SARs) / DSARs

What is a Subject Access Request (SAR) or Data Subject Access Request (DSAR)? What information do I need to provide in response to an SAR? How quickly do I need to respond to an SAR? How do I verify the identity of the person making the request? What are record-keeping obligations for DSAR responses? What are penalties for ignoring data-subject rights?