Access Request
What is Access Request?
A formal request by a data subject to obtain information about what personal data an organization holds about them and how it is processed.
Terms that appear alongside access request
Each of these is named in at least one of the same controls as access request. The number is how many controls name both.
- consent 4 shared controls
- data subject 4 shared controls
- profiling 3 shared controls
- audit 3 shared controls
- gdpr 3 shared controls
- sub processor 2 shared controls
- privacy engineering 2 shared controls
- data protection 2 shared controls
Frameworks that govern access request
What the standards actually require on access request
Requirements naming access request across 6 standards, quoted from the control text.
Schedule 1 DPP6 Data Access and Correction Principle establishes a data subject right to (a) ascertain whether a data user holds personal data of which he is the subject, (b) request access to personal data within reasonable time + fee + form + manner, and (c)...
HK-PDPO-DPP6-Access-Correction-Complaints · HK PDPO DPP6 Data Access + Correction Principle + Data Access Request + Data Correction Request + Complaints →Organisation has procedures for authenticating data subjects and responding to access requests in a timely manner.
PMF-A.2 · Access Request Process →Data subjects (or assignees) may consult their personal data held by a controller/processor; the consultation must be answered within ten (10) business days (extendable by five).
CO-L1581-A14 · Consultations (Access Requests) →Clarifies the handling of data subject access requests, including that controllers need only carry out reasonable and proportionate searches and that the response clock can be paused while seeking clarification or identity verification.
DUAA-P5-DSR · Data subject access requests (reasonable and proportionate searches) →TLD name registries and entities providing domain name registration services carry a dedicated set of duties aimed at DNS security, stability and resilience.
nis2-directive::Art.28 · Maintain accurate domain name registration data and answer lawful access requests within 72 hours →Access Control Decisions. [organization-defined] to ensure [organization-defined] are applied to each access request prior to access enforcement
NIST800-AC-24 · Access Control Decisions. [organization-defined] to ensure [organization-defined] are applied to each access request prior to access enforcement →Questions people ask about access request
What is Access Request?
Why is Access Request important for compliance?
Which compliance frameworks address Access Request?
Where can I learn more about Access Request?
See how Access Request applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.