Making a request
Requests to access, export, correct, erase, object or withdraw consent each receive a random reference and a status you can follow.
PDPA workflow
Personal data rights centre
Describes the workflow for data subject requests, without claiming this template covers every point of law.
A template that needs review Before this is published the tenant must name its data controller, set the effective date, and put in its real terms.
Verifying identity
We ask only what is needed to keep data from being disclosed to the wrong person, and separate the approver where a request carries risk.
Deciding and replying
The reasoning, the timeframe, any exemptions applied and the evidence of what was done are all kept in the audit trail.