---
title: "Update a Subject Access Request"
method: PATCH
path: "/internal-subject-access-requests/{request_id}"
tags: ["Subject Access Requests"]
---

# Update a Subject Access Request

`PATCH /internal-subject-access-requests/{request_id}`

Update a Subject Access Request by ID

## Path parameters

- `request_id` integer, required

## Request body

- SubjectAccessRequestUpdate
  - `completed_at_time` string, date-time, nullable — Time when the request was completed
  - `export_location` string — s3 path to the Subject Access Request's ZIP file in the optimizely-sar-prod bucket
  - `processing_started_time` string, date-time, nullable — Time when the processing of the request started
  - `status` 'pending' | 'processing' | 'completed' | 'failure', required — Status of the Subject Access Request

## Response `200`

Return the updated Subject Access Request

- SubjectAccessRequestInternal
  - `account_id` integer — Admin account id
  - `completed_at_time` string, date-time, nullable — Time when the request was completed
  - `data_source` 'app_backend' | 'app_backend_infra' | 'data_platform' | 'datawarehouse' | 'external_systems' | 'optimizely' | 'optimizely_on_optimizely' | 'program_management' | 'security' | 'business_systems' | 'marketing' | 'tse', required — Subject Access Request Data Source
  - `data_type` 'user' | 'visitor', required — Subject Access Request Data Type
  - `expired_at_time` string, date-time — Time when the url expires (7 days from the completed_at_time)
  - `export_location` string — The location to which the data will be exported.
  - `id` integer — Subject Access Request ID
  - `identifier` string, required — Subject Access Request Identifier
  - `identifier_type` 'email' | 'optimizely_end_user_id' | 'dcp_id' | 'fullstack_id' | 'other', required — Subject Access Request Identifier Type
  - `parent_request_id` integer — Parent Subject Access Request id
  - `processing_started_time` string, date-time, nullable — Time when the processing of the request started
  - `request_type` 'access' | 'delete', required — Subject Access Request Request Type
  - `requested_at_time` string, date-time — Time when the request was submitted
  - `sla_deadline_time` string, date-time — Time by which the request must be deleted
  - `status` 'pending' | 'processing' | 'completed' | 'failure' — Status of the Subject Access Request

## Other responses

- `400` — Invalid ID or request body
- `401` — Invalid credentials
- `403` — You do not have permission to edit the specified Subject Access Request
- `404` — Subject Access Request not found
- `default` — Unexpected error

---

[API](https://skmtc.dev/optimizely/apis/optimizely-api.md) · [All operations](https://skmtc.dev/optimizely/apis/optimizely-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/optimizely/optimizely-api/revisions/5151fe6a2297/schema)