Access Request
What is Access Request?
A formal request by a data subject to obtain information about what personal data an organization holds about them and how it is processed.
Terms that appear alongside access request
Each of these is named in at least one of the same controls as access request. The number is how many controls name both.
- consent 4 shared controls
- data subject 4 shared controls
- profiling 3 shared controls
- audit 3 shared controls
- gdpr 3 shared controls
- sub processor 2 shared controls
- privacy engineering 2 shared controls
- data protection 2 shared controls
Frameworks that govern access request
What the standards actually require on access request
Requirements naming access request across 6 standards, quoted from the control text.
The employer must make monitoring information available to workers who make a subject access request unless an exemption applies; because large or unstructured monitoring stores and third-party data make requests hard, it should consider how easily information...
uk-ico-employment-practices-and-data-protection-monitoring-workers-2023::1.20 · 1.20 Answer subject access requests for monitoring data, and plan retrieval in the DPIA →Requests for physical access are reviewed and approved by the asset owner, custodian or authorised delegate, who checks the need against business and security requirements.
australian-energy-sector-cyber-security-framework-aescsf::ACCESS-3g · ACCESS-3g: Asset owners approve physical access requests →Requests for privileged access to systems and their resources are validated when first requested.
ISM-1507 · Validating privileged access requests →Limits the right of access (UK GDPR, and Parts 3 and 4 of the 2018 Act) to what the controller can provide from a reasonable and proportionate search, with effect treated as from 1 January 2024.
data-use-and-access-act-2025::s.78 · Section 78: Reasonable and proportionate searches for access requests (UK GDPR Article 15(1A)) →Where footage is still stored or processed when a request arrives, the person should be given access and the Article 15 information; if nothing was recorded, only the fact that no data is processed any longer can be given.
edpb-guidelines-3-2019-on-processing-of-personal-data-through-video-devices::6.1(a) · 6.1(a) Access requests: give confirmation and a copy, masking other people →On request, the controller confirms whether data are processed and provides the data and categories, available information on origin, purposes and legal basis, recipients (particularly in third countries), storage period or criteria, the rights to rectificatio...
germany-federal-data-protection-act-bdsg::s57 · s 57 Answer access requests with the listed information, and handle refusals through the Federal Commissioner →Questions people ask about access request
What is Access Request?
Why is Access Request important for compliance?
Which compliance frameworks address Access Request?
Where can I learn more about Access Request?
See how Access Request applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.