Section 4: Data Subject Requests
This process step involves handling data subject requests as per applicable laws and regulations. The step entails receiving, processing, and responding to requests from individuals regarding their personal data held by the organization. These requests may include but are not limited to right of access, rectification, erasure, restriction of processing or portability. Upon receipt of a request, it will be logged in the designated tracking system to ensure accountability and transparency. The information requested will be verified, located, and compiled as per organizational procedures. A response will then be provided to the individual within the timeframes stipulated by law, which may include providing access to their personal data or making amendments where necessary. This process ensures that individuals have control over their personal information.