What is Data Subject Access Request? — UK Software Development Guide

4 min readJune 2025ClickMasters Technical TeamReviewed by James Whitmore, CTO
what is a data subject access request

Direct Answer

A Data Subject Access Request (DSAR or SAR) is a request from an individual (the data subject) to an organisation to receive a copy of all personal data the organisation holds about them. Under UK GDPR Article 15, organisations must respond to DSARs within one calendar month (extendable to three months for complex requests), at no charge.

DSAR in the UK

DSARs are a significant operational burden for UK software businesses — and a legal obligation. Software must technically support DSARs: a mechanism to compile all personal data for a specific user across all tables and services, export in a portable format (JSON, CSV), and redact third-party data from the response. Common challenges: microservices architectures where personal data is scattered across 15+ services, caches containing personal data that must be included, and LPP (Legal Professional Privilege) screening for legal sector software. ClickMasters implements DSAR response capabilities as a standard technical requirement on all projects processing personal data.

Get Expert Advice on DSAR

Speak with our UK software development experts about DSAR. Free consultation, transparent pricing, no obligation.