DataSubjectRequests
Access, erasure and portability requests, from intake through to fulfilment.
Log a data subject request
Records a request from a data subject to access, erase, correct or export their data, starting the clock on your response deadline. Requires `dsr.create`.
List data subject requests
Returns data subject requests with their type, state and deadline. Requires `dsr.read`.
Get a data subject request
Returns one request, including what was done to fulfil it. Requires `dsr.read`.
Update a data subject request
Moves a request through review or records notes against it. Requires `dsr.update`.
Delete a data subject request
Soft-deletes a request record. The request is removed from the queue but retained for the regulatory audit trail, so this is a withdrawal of the case, not an erasure of the fact that it existed. Requires `dsr.delete`.
Fulfil a data subject request
Completes the request and records what was done. For an erasure request this also withdraws every consent-based record held for that subject, while retaining those held under a legal obligation or a contract — the response lists both, so the decision is auditable rather than implied. Requires `dsr.update`.