Any individual whose personal data your organization handles can submit a DSAR. It's a way for them to access and review the information you have about them.