Consumers can typically exercise their right to access by submitting a data subject access request (DSAR) to the organization. This request can be made through various channels, such as email, web forms, or even physical mail. The organization is then obligated to provide a comprehensive response within a specified timeframe, usually 30 days under GDPR.