Jurisdiction Guides — Privacy Law DSAR Requirements by Country
Compare DSAR and privacy access request requirements across jurisdictions worldwide. US state privacy laws, GDPR, UK GDPR, PIPEDA, and more.
Last updated: 2026-03-01
Privacy laws around the world grant individuals the right to access their personal data — commonly called a data subject access request (DSAR) or subject access request (SAR). Each jurisdiction has its own deadlines, consumer rights, penalties, and compliance requirements.
Whether you are handling requests under the GDPR, US state privacy laws, Canada's PIPEDA, or privacy laws in Australia, New Zealand, South Africa, or India — understanding the specific requirements of each jurisdiction is essential to staying compliant.
Select a country below to see the full breakdown of DSAR requirements, response deadlines, and penalties.
Disclaimer: This content is for informational purposes only and does not constitute legal advice. Consult a qualified attorney for guidance specific to your business.
Canada
Canadian privacy access request requirements under PIPEDA and provincial laws. Rights, deadlines, OPC guidance, and compliance obligations for businesses.
2 guidesEuropean Union
GDPR data subject access request requirements for businesses serving EU residents. Rights, deadlines, penalties, and compliance guidance.
1 guideUnited Kingdom
UK data subject access request requirements under the UK GDPR and Data Protection Act 2018. Rights, deadlines, ICO guidance, and institution-specific SAR guides.
1 guideUnited States
Compare DSAR response deadlines, consumer rights, identity verification, and penalties across all 19 US state privacy laws.
19 guides