---
title: What is a data subject access request?
description: Quickly learn about Data Subject Access Requests with a high level overview and some concrete, real world examples.
image: https://safe.truevault.com/hubfs/Data%20Subject%20Request-2.svg
---
- [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa)
- [GDPR Compliance](https://safe.truevault.com/gdpr-guide)
- [HIPAA](https://safe.truevault.com/learn/hipaa)
- [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii)
- [PHI](https://safe.truevault.com/protected-health-information)
- [Resources](https://safe.truevault.com/learn/)
- Login
[TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
- [Resources](https://safe.truevault.com/learn/)
- Login
- Login
- [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com)
- [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
[Blog](https://safe.truevault.com/blog)
- [Home](https://www.truevault.com/index.html)
- [Blog](https://safe.truevault.com/blog)
# What is a data subject access request?
By Justin Gold/ Published on March 7, 2019
A [Data Subject Access Request](https://www.truevault.com/learn/what-gdpr-says-about-data-subject-requests) (DSAR) refers to a petition by a data subject (an identifiable individual about whom personal data is held) to a [data controller](https://www.truevault.com/learn/what-is-the-difference-between-a-data-controller-and-a-data-processor) (e.g., an organization/institution which sets personal data processing standards) regarding their personal data. A data subject may request access to their personal data record, edits or corrections to their personal data record, or request that their some or all of their personal data record with the company be deleted. The organization receiving this request, whether it is a [data controller or a data processor](https://www.truevault.com/learn/what-is-the-difference-between-a-data-controller-and-a-data-processor), is expected to oblige this request within 30 days unless an exemption is made.
**Real World Examples**
Through a DSAR, an individual has the right to receive confirmation that your company is or is not collecting his/her data, insight into how the data is being used, and the ability to request erasure, correction, or deletion of data collected. If your company is collecting his/her personal data, that company has an obligation to grant a data subject access to their personal data. Below are two examples that highlight when a data subject might invoke their right to access, amendment, or deletion of their [personal data](https://www.truevault.com/learn/what-is-personal-data-under-gdpr) under [GDPR](https://www.truevault.com/solutions/gdpr).
*Example 1*
Amy is moving from her city flat into a bigger home in the countryside, so she needs to update her billing address for her monthly book club shipment. Amy can request that the company that manages her book club membership change her personal data record (Article 16 of GDPR) from her old address to her new address in every instance on her personal data record. The book club company has 30 days to complete this request under GDPR, which is incidentally the time frame of Anna’s monthly book club membership.
*Example 2*Jonas has been a loyal customer of ACME Running’s custom running shoes for years. Until recently, when his running partner finally convinced him to try a new brand of running shoes, and now he’s hooked. He wants to erase his personal data record from ACME Running shoes, and calls to request that his personal data record (which includes identifiable information, his running shoe purchase history, shipping information and more) be deleted (Article 17 of GDPR). ACME Running has exactly one month to honor Jonas’ request that all his personal data be removed from their system.
*DSARs are fundamental to GDPR compliance. Learn more about DSARs,* [record keeping](https://www.truevault.com/learn/what-gdpr-says-about-record-keeping) *and the other core components of the Regulation with our GDPR Guide. *
*[](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/0cf9356f-ea48-4dd4-9e30-6767aa4dc118)*
### Latest Posts
## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply)
Phillip Walters / November 17, 2022
## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply)
Phillip Walters / November 10, 2022
## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control)
Phillip Walters / November 7, 2022
## [A Cookie Banner Isn't Enough for CCPA Compliance](https://safe.truevault.com/blog/a-cookie-banner-isnt-enough)
Phillip Walters / October 27, 2022
## [Why CCPA Compliance Matters to HR](https://safe.truevault.com/blog/why-ccpa-matters-to-hr)
Phillip Walters / October 21, 2022
### Mailing List
### Company
- [Blog](https://safe.truevault.com/blog)
- [Contact Us](https://safe.truevault.com/contact-us-2019)
- [Careers](https://truevault.workable.com)
- [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/)
### Developers
- [Patterns](https://safe.truevault.com/patterns)
- [Documentation](https://docs.truevault.com/)
- [Quick Start Guide](https://safe.truevault.com/quick-start-guide)
- [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure)
- [API Overview](https://safe.truevault.com/api-overview)
### Latest Posts
### Contact Us
201 Mission Street, 12th Floor
San Francisco, CA 94105
Email: [hello@truevault.com](mailto:hello@truevault.com)
2024 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use) | [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)