Subject Access Request Response
Standard SAR acknowledgment and response — includes data categories, retention periods, and third-party disclosures.
Right to Erasure Response
Right to be Forgotten — confirms deletion or explains legitimate grounds for retention under Art. 17(3).
Data Portability Response
Confirms data export in machine-readable format (JSON/CSV) or transfer to named controller.
Objection to Processing
Acknowledges right to object — confirms cessation or documents compelling legitimate grounds override.
Rectification Response
Confirms correction of inaccurate personal data or explains grounds for refusal, with third-party notification obligations.
Automated Decision-Making
Explains logic of automated decisions, discloses profiling, and confirms right to human review. Built for law firm AI screening challenges.
30-Day Extension Notice
Complex request extension — notifies within 30 days, up to 2-month extension under Art. 12(3).