The following principles should guide your response to any DSARs. We have focused here on employment-related DSARs and we therefore use related terminology, but bear in mind any data subject can bring any rights request against a controller – not just employees. Recognise the DSAR immediately. A DSAR may be made in writing, by email, social media or other electronic means, or even verbally.