Compliance Glossary

Under the Right of Access, a data subject (individual) can raise a written or verbal Subject Access Request (SAR) that grants them access to their information and allows them to understand if their information is being processed or not. Data processors will be required to fulfill SARs within a month of them being raised and in a format that is secure and easily understandable, accessible, and concise. Data processors can deny such requests if exceptions or restrictions are in effect. A third party may, with the right form of consent and permission, raise an SAR on behalf of a data subject.