PrivacyGDPR

Choose your privacy frameworks and response windows

Turn on the privacy laws you take requests under, and commit to a response window tighter than the statute's.

Updated 2 min read

Each request is filed under a framework, the privacy law it's made under, and that framework sets its response window. The Frameworks tab of Compliance › Privacy is where you choose which frameworks you take requests under and how fast you answer them.

What enabling a framework does

An enabled framework is offered when you record a request, and on your Privacy Center's request form under Under which law?. A request filed under it takes its due date from that framework's window: the statutory one, or the tighter one you commit to. A workspace that hasn't changed anything has the GDPR, UK GDPR, CCPA / CPRA, VCDPA and LGPD enabled. When you record a request yourself, Other is always offered too, with a 30-day window and no extension.

The frameworks are grouped by region, each row showing its Response window and Requests this year. The tiles count Frameworks enabled, Requests this year, the Tightest window and your SLA overrides.

Turn a framework on or off

Flip the framework's switch. Turning it on asks you to confirm with Accept requests; turning it off, with Stop accepting requests. Requests already filed under a framework you turn off are untouched and keep their due dates. Either change is written to the audit log.

Commit to a tighter window

  1. Select Customize on the framework's row. The panel shows the statute's facts: Response window, Rights granted by law, the Regulator and the Citation.
  2. Under Response window, select Commit to a window.
  3. Enter the Committed response window in days, then select Save window.

The window can only be tighter than the statute's. Where the statute counts in months, as the GDPR's one month does, the most you can enter is 28 days for each month, so the window always ends inside the statutory period. Every open request under the framework moves to the new window at once.

To drop it, select Reset to statutory. Open requests move back to the statutory window. The window before any extension is also the time you have to extend a request; see Extend a request's deadline.