Do you know what Data Subject Access Requests are? They are requests from data subjects to access, modify, or remove information from a company's database. With the General Data Protection Law, all consumers now have this right.
The trend is for people to actually seek to know what kind of data companies have about them. To reiterate, according to the law itself, the data subject is the "natural person to whom the personal data being processed refers".
Establish a workflow.
O data mapping This is the first step, as it allows you to understand how much data the company has on each person, as well as where to find it in these cases.
It is important to establish deadlines and assign people responsible for fulfilling these requests. The figure of DPO is essential In this case, this professional is responsible for the protection of personal data within the organization.
Establish the next steps after a request arrives. Be aware of all communication channels, as the data subject may make a request via email, phone, contact forms, or social media.
It's important to know that a person can request all the data the company has about them. This can be a laborious request, as it requires searching various databases, such as marketing, sales, etc. But it's important to fulfill this request, so if you feel it's necessary, ask if they really want all the data or if they need specific information. Depending on the answer, it's possible to optimize the process.
Inform your team about the LGPD (Brazilian General Data Protection Law).
Knowledge of the General Data Protection Law is not entirely effective if it remains limited to the DPO and senior management. Everyone in the company who has direct contact with customer data should know what the rights of data subjects are.
Promote dialogue and spread information about data protection, creating a crop An organization that takes care of customer information, doing everything possible to prevent the leakage and misuse of personal data.
Incorporate tools into your daily routine.
Finally, it's time to move on to the practical part. Implement tools for handling requests from account holders Data management within your company. This allows you to centralize requests and track which ones have been fulfilled and which have not, so everyone knows the status of each request.
In addition to requests, a helpful tool for everyday tasks is to store proof of consent and important logs in... blockchainThus, in cases of necessity, it is possible to prove that the data subject provided their data, among other important information, in an immutable and secure manner.
Want to see in practice how Privacy Tools solutions can help your company in the compliance process? Try this: free trial!
