Back to glossary
Rights

Right of access

Also known as: subject access request, SAR

The right of access (commonly exercised via a Subject Access Request) allows a data subject to obtain confirmation from a controller as to whether their personal data is being processed, and if so, to receive a copy of that data along with supplementary information such as the purposes of processing, the categories of data, and the recipients to whom it has been or will be disclosed. Controllers must respond within one month of receipt.

DPA reference

Data Protection Act 2020

Related terms in Rights