Your data rights
DSAR vs the right to erasure — what is the difference?
A plain-language guide to two different UK GDPR rights that are easy to mix up: one lets you ask to SEE the personal data an organisation holds about you, the other lets you ask it to DELETE certain data — and how to choose which one you need.
In short
A DSAR (Data Subject Access Request) is your UK GDPR right to ask an organisation for a copy of the personal data it holds about you — it asks to SEE. The right to erasure is your separate right to ask it to DELETE certain personal data about you. One reveals; the other removes.
Two different rights, often confused
A Data Subject Access Request (DSAR) and the right to erasure are both rights the UK GDPR gives every individual, but they do very different things — and it is easy to reach for one when you actually need the other.
A DSAR is the right of access under the UK GDPR (Article 15). It lets you ask an organisation to confirm whether it holds personal data about you and, if so, to give you a copy along with information about how and why that data is used. It is about seeing — getting visibility of what is held.
The right to erasure under the UK GDPR (Article 17), sometimes called the right to be forgotten, is the right to ask an organisation to delete personal data it holds about you. It applies in certain circumstances, not in every case. It is about removing — asking for data to be taken away. This is general information, not legal advice.
Point by point: see vs delete
The simplest way to keep the two apart is to remember what each one asks the organisation to do.
- A DSAR asks to SEE your data; the right to erasure asks to DELETE it.
- A DSAR is the right of access (Article 15); erasure is a separate right (Article 17).
- A DSAR usually applies to any personal data held about you; erasure applies only in certain circumstances.
- A DSAR gives you a copy plus an explanation of how your data is used; erasure, where it applies, results in the data being removed.
- With a DSAR the organisation usually has one calendar month to respond and in most cases cannot charge a fee; an erasure request is also normally answered within one calendar month.
- A DSAR is often the first step — you see what is held, then decide whether to ask for any of it to be erased.
When to use which
Reach for a DSAR when you want to understand what an organisation holds about you — for example, before you decide whether anything needs to change. Because it gives you a copy of your data and an explanation of how it is used, a DSAR is usually the right starting point when you are not yet sure what is out there.
Reach for the right to erasure when you already know what data you want removed and you want to ask the organisation to delete it. Erasure does not apply in every situation — an organisation can sometimes keep data where it has a valid reason to — so it helps to be specific about what you are asking to be deleted and why.
In practice the two often work together: a DSAR shows you the picture, and an erasure request acts on part of it. You stay in control of every step — the choice of which right to use, and whether to use one at all, is always yours. If you are unhappy with how an organisation handles either request, you have the right to complain to the Information Commissioner's Office (ICO).
Frequently asked questions
Is a DSAR the same as the right to be forgotten?
No. A DSAR (Data Subject Access Request) is the right of access under the UK GDPR (Article 15) — it asks an organisation for a copy of the personal data it holds about you. The right to be forgotten is another name for the right to erasure (Article 17), which asks an organisation to delete certain personal data. One reveals what is held; the other asks for it to be removed.
Can I ask to see my data and delete it at the same time?
You can use both rights, and many people do them in order: first a DSAR to see what an organisation holds, then an erasure request for the specific data they want removed. They are separate requests under separate articles, so it is usually clearest to state plainly which right you are exercising.
Does the organisation have to delete my data if I ask?
Not always. The right to erasure applies in certain circumstances, and an organisation can sometimes keep data where it has a valid reason to. A DSAR, by contrast, usually gives you access to a copy of your data. Because the decision to erase rests with whoever holds the data, no outcome can be guaranteed. This is general information, not legal advice.
Related terms
This is general information, not legal advice. For guidance on your own situation, consider speaking with a qualified professional.
Reviewed by Abdullah Kılıç, OSINTA's founding lawyer — 2026-06-27.
Not sure which one you need?
OSINTA helps you understand your own footprint and frame and route your own requests — you stay in control of every step.