Data right · Established

Subject Access Request (SAR)

Subject Access Request

What does Subject Access Request (SAR) mean?

A request by an individual for a copy of their personal data and information about its use.

Keep exploring

Personal DataInformation that identifies someone directly or can identify them when combined with other information.
Special Category DataSensitive data categories such as health, biometric identification, beliefs or sexual orientation under UK data protection law.
Data ControllerThe party responsible for determining the purposes and means of personal-data processing.
Data ProcessorAn organisation that handles personal data on documented instructions from a controller.
Lawful BasisOne of the recognised grounds that must apply before an organisation processes personal data.
Consent ManagementProcesses and systems used to collect, prove, update and withdraw valid consent where consent is the lawful basis.
Data MinimisationA principle requiring personal data to be adequate, relevant and limited to the stated purpose.
Purpose LimitationA principle that data collected for a clear purpose should not be reused incompatibly without justification.