Difference between revisions of "Access Requests"
(→Information) |
(→Privileges) |
||
| Line 50: | Line 50: | ||
''Access request'' can be created by the users to whom the corresponding privilege is granted (see [[Users & Groups]] for more information on how to set this privilege. | ''Access request'' can be created by the users to whom the corresponding privilege is granted (see [[Users & Groups]] for more information on how to set this privilege. | ||
| − | + | The lifecycle of the ''access request'' is managed by the following roles: | |
== Warning and alerts == | == Warning and alerts == | ||
Revision as of 21:13, 10 September 2018
Contents
Introduction to Access Requests
Access Requests provide the mean for data subjects to exercise their right to access information about the processing of their personal data (e.g. according to section 2, article 13 of GDPR Regulation).
The process enables to record "Access Requests" and to support their fulfilment.
Workflow
A new Access Request can be created using the Add New functionality and choosing "Access Request".
A workflow enables to move the Access Request" in several statuses as shown in the following picture.
The following table explains the meaning of each status:
| Status | Description |
|---|---|
| Default | A transitory status active when the access request if initially created. |
| Opened | An access request in this status is draft and it is not actioned. |
| Requested | An access request in this status is confirmed and it is waiting to be actioned. |
| In charge | In this status, the access request has been taken in charge and it is being actioned. |
| Cancelled | Access request cancelled. This is an end of life status. |
| Completed | In this status, all activities related to the action request were completed and closure is expected after confirmation. |
| Suspended | Activities concerning the access request are temporarily suspended, meaning no further status transitions are allowed. |
| Closed | In this status, all activities related to the access request are completed and confirmed. This is an end of life status, meaning no further status transitions are allowed. |
Information
Access request records information are organized in four secions:
- Identification, where identification data of the access request are recorded,
- Ownership & Organization, containing the assignment of the key roles enabled to manage the access request;
- Access Request Details, with the details of the access request;
- Data Subject Details, with the details of the data subject issuing the access request;
- Data Subject Representative, containing the details of the representative of the data subject, if any.
Details on every fiel can be found by pointing the mouse on the (i) next to each field. This will activate a tooltip with a brief description of the field.
Privileges
Access request can be created by the users to whom the corresponding privilege is granted (see Users & Groups for more information on how to set this privilege.
The lifecycle of the access request is managed by the following roles:
