Subject Access Request
(SAR)
A Subject Access Request is a right under UK GDPR allowing any individual to ask an organisation for a copy of all the personal data it holds about them. Organisations must respond within one month (extendable to three months for complex requests) and provide the information free of charge in most cases. The right can be limited where disclosure would adversely affect the rights and freedoms of others.