Data subject access request (DSAR)

A request from an individual to learn what personal data the company processes about them — a right under Article 15 of the GDPR. The company must disclose the purposes, categories of data, recipients and retention period, and provide a copy of the data. The response must be given without undue delay and no later than one month after receipt; the deadline can be extended by two months for complex requests. The response is free of charge for the data subject as a rule.