Guides
Handle a data subject request
Locating a subject's data, and where AML retention limits what may be erased.
Written for: Data protection officers and compliance administrators
Written from docs/adr/0019, api/openapi/openapi.yaml (Privacy)
The privacy surface locates the data held about a party, records the request and its handling, and applies retention and legal-hold rules to what may be done next.
What the platform doesPermalink to this section
- Locates data held about a party across the domain, including encrypted identifiers.
- Records the request, who handled it and what was done.
- Applies retention schedules and legal holds, and refuses an action that would breach one.
- Audits the access performed in the course of answering.
Both the request handling and the access it required land on the same audit chain as everything else, so answering a subject request is itself reviewable.