Skip to content

What is Data subject access request (DSAR)?

A data subject access request is a demand by an individual, under Article 15 of the GDPR, to be told whether their personal data is being processed and to receive a copy of it together with information about how and why it is used.

Updated

  • DSAR
  • Subject access request
  • Auskunftsersuchen
The employee directory
Data-subject export in People

Compliance

Data subject access request (DSAR), explained

The controller must respond without undue delay and within one month, extendable by two further months for complex requests, and the response is free unless the request is manifestly unfounded or excessive. Because the deadline runs regardless of how the data is stored, the practical burden falls on being able to find everything about one person across every system quickly.

How Enclessa uses it

Enclessa provides a data-subject export in the People module that assembles what the platform holds about one person, alongside a full organisation export in open formats. Content in end-to-end encrypted conversations is stored as ciphertext and Enclessa holds no key for it, so it cannot be produced by the operator in response to any request — a limit of the architecture, stated rather than worked around.