Data protection and compliance
Subject access request
A person's legal right to ask an organisation for a copy of the personal data it holds about them. In the UK the organisation normally has one month to reply. Often shortened to SAR or DSAR.
A plain-English explanation of how this usually works, not legal advice. Rules differ between countries and change over time, so check your own situation. Disclaimer.
You'll hear it as
We've had a subject access request from a former employee.
Why it matters to you.
Answering means finding someone's data in every system, including emails and logs. If you can't, that's a design problem.
Also called SAR / DSAR.
Related terms.
Videos.
No video mentions Subject access request by name yet. These are on the same topic, Business & startups.