Data Subject Access Request (DSAR)
An individual's right to receive a copy of their personal data under GDPR, CCPA, PDPA and DPDP.
A DSAR is a formal request from an individual (data subject) for a copy of the personal data an organisation holds about them, plus information on how it is used. GDPR requires a response within one month; CCPA 45 days; PDPA 30 days (indicative). Most startups automate DSARs with a request portal, an identity-verification step, and a template export.