DPC GDPR Data Subject Rights

Overview

Data subject rights (Art. 15–23) for DPC self-assessment: SAR, portability, deletion/rectification, restriction, object, profiling, and restrictions.

Getting Started

Add your source materials to the project workspace, then activate the DPC GDPR Data Subject Rights skill. The agent will guide you through the process step by step.

Example conversation

You: We get Subject Access Requests and the occasional request to delete or object. We need documented procedures and a one-month response process that covers all the rights in the DPC checklist.

Agent: I’ll use the data subject rights reference (Art. 15–23). I’ll draft procedures for: SAR (Art. 15)—identity check, one-month deadline, format; portability (Art. 20) where it applies; erasure and rectification (16–17); restriction (18); objection (21) and how we stop processing when someone objects; profiling and automated decisions (22)—human intervention and contestation; and any documented restrictions (23). I’ll add a simple flow and template wording so your team can respond consistently and on time.

Output excerpt

Subject Access Request procedure (excerpt)

1. Receive — Log request, date, identity of requester.
2. Verify identity — Ensure you are satisfied the requester is the data subject or entitled to act on their behalf.
3. One-month clock — Respond within one month (extend by two further months only if necessary, and inform the individual).
4. Response — Provide a copy of their personal data; purposes; categories; recipients or categories; retention; rights; source; profiling/automated decision-making if applicable; safeguards if transfer. Format: structured, commonly used, machine-readable if they request portability (Art. 20).
5. Refusal/restriction — If refusing (e.g. Art. 23), explain and inform re complaint to DPC.

Other rights — Procedures for erasure (17), rectification (16), restriction (18), objection (21), and for profiling (22) human intervention and contestation are documented in [internal doc]. All communicated in the privacy notice.

Extension and validation

This skill does not include custom validation tools. Elaboration is guided by the skill workflow and reference materials. You can add tools in extension.ts later (e.g. to check required sections or checklist coverage) if you want automated validation.