How To Respond To A Data Subject Access Request (DSAR)

The Data Production Act of 2018 allows any individual to contact a business and request how their personal information is being used. Businesses of all sizes, from small privately-owned shops to multi-national firms, must record how personal information is used and provide the necessary data to the consumer when requested.

When a data request is made, the business generally has 30 days to respond to this request. Steps must be taken during this time to also protect the information if the consumer requires more data. Businesses will respond to consumers in the same manner as they would if this was a request for eDiscovery or part of an eDisclosure.