---
title: "Update Subject Rights Request"
method: PATCH
path: "/v1/subject-rights/requests/{dsarId}"
tags: ["dsar"]
---

# Update Subject Rights Request

`PATCH /v1/subject-rights/requests/{dsarId}`

## Request

- Base URL: `https://api.osano.com`
- URL: `https://api.osano.com/v1/subject-rights/requests/{dsarId}`
- Auth: API key in header `x-osano-api-key`
- TypeScript: <https://skmtc.dev/osano/apis/osano-api-reference/docs/v1/subject-rights/requests/:dsarId/patch.ts> (a function with typed inputs; its response is checked against the schema)

Update metadata about a Subject Rights Request as specified.  A partial update may be performed.

## Path parameters

- `dsarId` string, required

## Request body

- DsarUpdate
  - `status` 'PENDING_EMAIL_VERIFICATION' | 'PENDING_IDENTITY_VERIFICATION' | 'IN_PROGRESS' | 'PENDING_APPEAL' | 'COMPLETED' | 'REJECTED' | 'REJECTED_AUTO' | 'IN_REVIEW'
  - `notes` string
  - `notify` boolean: When set to true and status is COMPLETED or REJECTED, an email notification will be sent to the requestor. Defaults to true when status is COMPLETED or REJECTED, otherwise defaults to false.
  - `content` string, nullable: Optional completion or rejection message to be emailed to the requestor. When status is COMPLETED or REJECTED, this message will be used as the completionMessage or rejectionReason in the notification. If omitted, the email notification handler will use a configured template. This message will be added to the portal conversation.
  - `rejectionReasonCode` 'TECHNICALLY_INFEASIBLE' | 'REJECTED_APPEAL' | 'UNCOVERED_GEO' | 'DUPLICATE' | 'UNFOUNDED' | 'OTHER' | 'IDENTITY_NOT_VERIFIED': Optional rejection reason code. Only applicable when status is REJECTED. Used to select a specific rejection template for the notification email.

## Response `200`

Success

- DsarResponse
  - `dsarId` string, required
  - `status` string, required
  - `requestType` string, required
  - `requestSource` string, required
  - `notes` string
  - `dsarDetails` object
  - `due` string, date-time, required
  - `created` string, date-time, required
  - `form` object
    - `formId` integer
    - `formName` string
  - `isTest` boolean, required: True if this is a test Subject Rights Request. Test requests are excluded from reporting. This value is read-only and cannot be set or changed through the API.

## Other responses

- `400`: Bad Request
- `404`: Not Found

## Changes

- **2026-11-06** `ac31099cf83e`: 3 info
  - added the new optional request property `rejectionReasonCode`
  - the `notes` request property's maxLength was increased from `500` to `3000`
  - added the required property `isTest` to the response with the `200` status
- **2026-05-12** `4fc37598750d`: 1 breaking, 1 warning, 10 info
  - request property `status` was restricted to a list of enum values
  - the `notes` request property's maxLength was set to `500`
  - added the new optional request property `content`
  - added the new optional request property `notify`
  - …8 more

[Operation history](https://skmtc.dev/osano/apis/osano-api-reference/changes/v1/subject-rights/requests/:dsarId/patch.md)

---

[API](https://skmtc.dev/osano/apis/osano-api-reference.md) - [All operations](https://skmtc.dev/osano/apis/osano-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/osano/apis/osano-api-reference/revisions/ac31099cf83e?raw)