8 Guides
Data Subject Requests and DSARs Explained
What a data subject request covers, from access to deletion and correction, the response timelines each law sets, and how to fulfill requests at scale.
A data subject request (DSR) is a person exercising a privacy right over their data: to see it, correct it, delete it, or take it with them. In everyday use, most people call the whole category a DSAR, which is technically the access request, so that is the term these guides are filed under. It covers all of them.
More than twenty US states and every major privacy law now grant these rights, and the volume keeps climbing.
DSAR Guides
- 1What Is a DSAR? Data Subject Access Requests ExplainedGuideA DSAR lets a person see the data you hold on them. Here is what one is, which laws require it, and how it differs from a DSR.7 min read
- 2DSAR vs DSR: What's the DifferenceGuideA DSAR is the access-specific request; a DSR is the umbrella covering deletion, correction, portability, and objection. Here is how they relate and why it matters operationally.6 min read
- 3DSAR Response Timelines by Law: GDPR, CCPA/CPRA, and MoreComparisonHow long you have to respond to a data subject request under each major privacy law, and when the clock can be extended.7 min read
- 4How to Build a DSAR Workflow That Doesn't Break at ScaleGuideWhy most DSAR failures are really data-mapping failures, and the six steps of a workflow that holds up when requests arrive in volume.8 min read
- 5Identity Verification for Privacy Requests: What's Required, What's OverkillGuideHow to confirm a requester's identity without over-collecting, calibrated to the sensitivity of the data and the action requested.7 min read
- 6DSAR Denial and Exemptions: When You Can Say NoGuideThe legitimate grounds for declining or narrowing a data subject request, and how to document the decision so it holds up.7 min read
- 7Employee DSARs: A Different Animal From Consumer RequestsGuideWhy access requests from current and former employees carry added complexity, from HR files to references to ongoing investigations.6 min read
- 8DSAR Response Playbook: Cut Response Time From Days to HoursPlaybookA concrete, repeatable playbook for handling data subject requests fast, from intake to closure, with the shortcuts that actually save time.8 min read