PrivacyGDPR
Data subject requests, records of processing, DPAs, DPIAs and sub-processors.
13 articles
- Handle a privacy requestWork a data subject request from arrival to a recorded response, inside the GDPR's one-month deadline.
- Verify a requester's identityConfirm the email address on a request filed through your Privacy Center, and ask for, review and record a government ID.
- Extend a request's deadlineTake the GDPR's extra time in 30-day steps, with a reason the subject is told.
- Reject a privacy requestClose a request you won't act on, one at a time or in bulk, with a reason the subject is told.
- Export privacy requestsDownload the request queue, or a selection of it, as a CSV of up to 100 requests.
- Build your record of processing activitiesUse the nine-step wizard or a single form to keep your Article 30 record, review it every six months and export it.
- Keep your sub-processor registerRecord each vendor that processes personal data for you, file its DPA, track renewals and choose which vendors your Privacy Center lists.
- Generate a DPA for a customerCompose an Article 28 data processing agreement for a controller you process data for, then file the signed copy.
- Run a DPIAOpen a data protection impact assessment, score its risks, take it through review and approval, and export the register.
- Choose your privacy frameworks and response windowsTurn on the privacy laws you take requests under, and commit to a response window tighter than the statute's.
- Require SMS verification on the request formHave your Privacy Center's request form prove the requester's mobile number with a texted code before it accepts the request.
- Requests included in your Privacy subscriptionYour Privacy fee includes a number of requests each billing cycle; the Requests tab shows how many you've used and what the rest will cost.
- Do you need an EU representative under the GDPR?When Article 27 requires a company outside the EU to appoint a representative, and the two exceptions.