liveBook · Manning

Data subject access request

As explained in Data for All

A data subject access request is a request by an individual to obtain personal information held about them by an organization.

What personal information does a business hold about you? Under California’s Consumer Privacy Act (CCPA), a data subject access request, or DSAR, lets a consumer ask a covered business for the categories and specific pieces of personal information it holds about them. section 4.7.3

Access is one of several CCPA protections. Consumers can also request deletion of their personal information and must have an opportunity to opt out before a business sells it. These are distinct choices: finding out what a business holds is not the same as asking it to delete that information. section 4.7.3

How Data for All covers it

How deep it goes
Defines access to categories and specific pieces of information, without explaining request procedures or response timelines.
Examples
Uses information held by covered businesses as the concrete subject of a request.
What you can do after
Evaluate/understand the CCPA right to request access to personal information held by a covered business.
How it connects
Connects access requests to the CCPA, deletion rights, opting out of information sales, and GDPR.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Data for All. The section links point to the parts of the book it draws on.