Data Subject Access Request (DSAR) — Form & Workflow

TEMPLATE for educational/operational use. Confirm internal and legal requirements with counsel; not legal advice.

Part A — Request form (for the data subject)

1. Your full name:
2. Email / contact:
3. Relationship to us (e.g. customer, employee):
4. What would you like to do? (select) Access a copy of your data
   Correct your data
   Request deletion (subject to legal limits)
   Other:
5. To help us locate your data, please describe your interaction with us:
6. Date of request:   Signature:

Part B — Internal handling workflow

1. Log the request with a unique reference and date received:
2. Verify the requester’s identity / right to make the request:
3. Search all systems for the relevant personal data:
4. Determine any lawful grounds to limit or refuse part of the request (e.g. legal, security):
5. Prepare the response / action; if refusing, give reasons and rights to complain:
6. Respond within the required timeframe and record the outcome:

Track each DSAR (reference, received date, due date, status, closed date) to demonstrate an operating rights-request process.