Privacy

Right of Access

The right to obtain a copy of your personal data and information about how it is processed.

The right of access (also called a Subject Access Request or SAR) allows data subjects to obtain confirmation as to whether their personal data is being processed, and if so, to access a copy of it.

What You Can Request

  • Whether your data is being processed
  • A copy of the personal data
  • The purposes of processing
  • The categories of data concerned
  • The recipients or categories of recipients
  • The retention period or criteria for determining it
  • The source of the data (if not collected directly from you)
  • Whether automated decision-making / profiling is used

Timeline

Controllers must respond within 30 days (GDPR) or 45 days (CCPA). Extensions are possible for complex requests.

GDPR Article 15.

Related Terms

Personal DataPrivacy

Any information that can identify a living individual, directly or indirectly.

Data SubjectPrivacy

The identified or identifiable person whose personal data is being processed.

Data PortabilityPrivacy

The right to receive your personal data in a structured, machine-readable format and transfer it to another service.

Right to ErasurePrivacy

The right to have your personal data deleted — also known as the "right to be forgotten."

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.

Records of ProcessingRight to Erasure