Right to Access
A data subject's right to obtain confirmation of whether their personal data is being processed and to receive a copy of it.
Full Definition
The Right to Access (Article 15 GDPR; equivalent rights exist under CCPA, DPDP Act, and most privacy laws) allows individuals to request confirmation that their personal data is being processed and, if so, to receive a copy of the data plus information including: purposes of processing, categories of data, recipients or categories of recipients, intended retention periods, information about other rights, and any available information about data sources. Under GDPR, responses must be provided within 30 days. The right is foundational to data subject autonomy — it enables individuals to verify whether their data is accurate and whether processing is lawful.
Related terms
DSAR
Data Subject Access Request — a formal request from an individual to access the personal data an organisation holds about them.
Right to Erasure
An individual's right to have their personal data deleted ('right to be forgotten') in certain circumstances.
Right to Data Portability
A data subject's right to receive their personal data in a structured, machine-readable format and to transfer it to another controller.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.