GDPR Data-Subject Rights
Process flow when a user invokes access / erasure / portability rights.
Rendering…
Make it your own.
flowchart TD
Req[Subject request received] --> Verify{Identity verified?}
Verify -- no --> Reject[Reject + log]
Verify -- yes --> Type{Right requested}
Type -->|Access| Locate[Locate all PII]
Type -->|Erasure| LocateE[Locate all PII]
Type -->|Portability| Pack[Export JSON / CSV]
Type -->|Rectification| Edit[Edit and confirm]
Locate --> Compile[Compile report] --> Deliver[Deliver within 30 days]
LocateE --> Erase[Erase or anonymise] --> Confirm[Send confirmation]
Pack --> Deliver
Edit --> Confirm