# Privacy Requests: Fundamentals

This page introduces the key terms and concepts behind privacy requests. For detailed guides on each topic, follow the links below.

## What are Privacy Requests? [Permalink for this section](/content/docs/privacy-requests/concepts/fundamentals#what-are-privacy-requests/index.html)

Privacy requests, also sometimes called Data Subject Requests (DSRs or DSARs), are the rights afforded to a user whose data is processed by an organization.

The rights afforded to your users are based on _their_ location and not your organization's!

The commonly recognized rights are **Access**, **Erasure**, **Rectification**, and **Portability**. For full descriptions of each right, see [Submitting privacy requests](/content/docs/privacy-requests/guides/submitting-requests/index.html).

## Key Terms [Permalink for this section](/content/docs/privacy-requests/concepts/fundamentals#key-terms/index.html)

- **Data Subject**: The owner of personal data collected by your organization — often your customers or employees. See the [glossary](/content/docs/privacy-requests/reference/glossary/index.html) for more terms.
- **Authorized Agent**: A third party appointed by a data subject to submit privacy requests on their behalf. You must honor requests from authorized agents provided you are satisfied the agent has been appointed by the subject.
- **Subject Identity Verification**: When you receive a privacy request, you are responsible for confirming the identity of the subject. Fides offers built-in verification via MFA. Learn more in the [identity verification guide](/content/docs/privacy-requests/guides/identity-verification/index.html).

## Receiving Privacy Requests [Permalink for this section](/content/docs/privacy-requests/concepts/fundamentals#receiving-privacy-requests/index.html)

Most global privacy regulations require you to provide at least two easy-to-find methods for submitting privacy requests (e.g., a web form, email, or phone). Learn how to configure your intake methods in the [submitting requests guide](/content/docs/privacy-requests/guides/submitting-requests#ease-of-access/index.html).

## Processing Timeframes and Exceptions [Permalink for this section](/content/docs/privacy-requests/concepts/fundamentals#processing-timeframes-and-exceptions/index.html)

Privacy requests must be completed within regulation-specific timeframes, and there are certain exceptions where you may not be required to fulfill a request (e.g., legal obligations, confidentiality risks). For timeframes, exception details, and examples, see [Managing privacy requests](/content/docs/privacy-requests/guides/reviewing-requests/index.html).

Now that we've covered the basics, let's dive into configuring and managing privacy requests with Fides.

[Overview](/content/docs/privacy-requests/concepts/overview "Overview"/index.html) [Request Execution](/content/docs/privacy-requests/concepts/execution "Request Execution"/index.html)