Data Subject Access Request Extractor

The request number and date, the letter sender and recipient, the letter date and subject, the data subject name, email, phone, address, and identification number, the organization (data controller) name and contact, and the request purpose.

No. A DSAR (Data Subject Access Request) is the request an individual sends to an organization to exercise their GDPR right of access to their personal data. A DPA is the contract between a data controller and a data processor, and a DPIA is a risk assessment of a processing activity. For those use the DPA or DPIA extractors.

The data categories requested (array), the scope of request (time period, systems, or activities), the response deadline (typically 30 to 45 days depending on jurisdiction), the response format (enum), the verification method, and the request status (enum, such as received, in progress, completed, or denied) each come back as fields.

Yes. A data categories table returns each category name, whether it was requested, and its response status; a processing activities table returns each activity, its legal basis, and whether data is held; a data recipients table returns each recipient name, category, and whether data was transferred; and a request timeline table returns each event date, type, and description.

The request is processed via the Talonic API for extraction only, is not retained for training, and is not shared. Redact identification numbers where your workflow allows. PDF only, up to 10MB and 100 pages.