DSAR (data subject access request)
A request by a person to access their personal data and related information under data-protection law.
What is a DSAR?
A data subject access request is a person's request for a copy of their personal data and information about how it is used. It does not need to contain the words 'DSAR' or cite a law to be valid.
The organisation must identify the request, locate data across systems, consider other people's rights, respond securely and meet the applicable deadline.
What matters
Start with the rule
A data subject access request is a person's request for a copy of their personal data and information about how it is used. It does not need to contain the words 'DSAR' or cite a law to be valid.
Write down the decision
Keep the policy, dates, calculation inputs and decision together so another person can understand what happened.
Check the current source
Complex requests, exemptions and third-party information may need specialist review. Use the ICO's current right-of-access guidance.
A practical checklist
For a small team, a short repeatable process beats an impressive policy nobody follows.
- Recognise and date the request
- Verify identity proportionately
- Search systems, files and processors
- Review third-party information and exemptions
- Send the response securely
- Keep a record of the decisions made
Where software helps — and where it does not
HollyHR can keep the relevant people record, dates, documents, leave and working pattern in one place. It cannot decide a legal, medical or employee-relations question for you.
Complex requests, exemptions and third-party information may need specialist review. Use the ICO's current right-of-access guidance.
Check the source, not just our summary
Rules and product pages change. These are the first-party references behind this page.
Questions people ask
Is this legal advice?
No. It is a practical summary for UK small teams. Check the linked official guidance and take qualified advice for a specific or disputed case.
Why keep the source with the calculation?
Rates and rules change. Recording the inputs, date and source makes the answer reviewable instead of becoming an unexplained number in a spreadsheet.
Can HollyHR track this?
HollyHR can hold the underlying employee, working-pattern, leave and document records. It does not present itself as a legal-advice engine.
Proper HR, without the big-system palaver.
HollyHR is free for up to 10 active people. We're onboarding early-access teams one at a time.
Keep reading: Privacy · Data export · Security