8 Guides
Data Subject Requests and DSARs Explained
What a data subject request covers, from access to deletion and correction, the response timelines each law sets, and how to fulfill requests at scale.
A data subject request (DSR) is a person exercising a privacy right over their data: to see it, correct it, delete it, or take it with them. In everyday use, most people call the whole category a DSAR, which is technically the access request, so that is the term these guides are filed under. It covers all of them. To see how it works in a product, explore privacy requests in Concord Privacy.
More than twenty US states and every major privacy law now grant these rights, and the volume keeps climbing.
DSAR Guides
- 1What Is a DSAR? Data Subject Access RequestsGuideA DSAR lets a person see the data you hold on them. Here is what one is, which laws require it, and how it differs from a DSR.7 min read
- 2DSAR vs DSR: What's the DifferenceGuideA DSAR is the access-specific request; a DSR is the umbrella covering deletion, correction, portability, and objection. Here is how they relate and why it matters operationally.6 min read
- 3DSAR Response Timelines by Law: GDPR, CCPA/CPRAComparisonHow long you have to respond to a data subject request under each major privacy law, and when the clock can be extended.7 min read
- 4How to Build a DSAR Workflow That ScalesGuideWhy most DSAR failures are really data-mapping failures, and the six steps of a workflow that holds up when requests arrive in volume.8 min read
- 5Identity Verification for Privacy RequestsGuideHow to confirm a requester's identity without over-collecting, calibrated to the sensitivity of the data and the action requested.7 min read
- 6DSAR Denial and Exemptions: When You Can Say NoGuideThe legitimate grounds for declining or narrowing a data subject request, and how to document the decision so it holds up.7 min read
- 7Employee DSARs: Not Like Consumer RequestsGuideWhy access requests from current and former employees carry added complexity, from HR files to references to ongoing investigations.6 min read
- 8DSAR Response Playbook: Cut Response TimePlaybookA concrete, repeatable playbook for handling data subject requests fast, from intake to closure, with the shortcuts that actually save time.8 min read