What is a data subject access request (DSAR)?
A data subject access request (DSAR) is a request from an individual to see the personal data an organization holds about them. GDPR gives people this right and generally requires a response within one month. CCPA and other privacy laws have similar rights to know.
What the buyer is really asking
Buyers need to know you can help them answer a DSAR within the legal deadline. Explain how a request reaches you, who finds the data, and how long it takes. If you only act on the customer's instructions as a processor, say that.
Other ways buyers ask it
Every one of these wants the same answer:
- “How do you handle data subject access requests (DSARs)?”
- “How do you support individuals exercising their GDPR rights?”
- “Can you export all personal data held about a specific individual?”
- “What is your turnaround time for data subject requests?”
Evidence to have ready
- A DSAR procedure or runbook
- The data subject rights clause in your DPA
- A log of past requests with response times, if you keep one
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.