Data Subject Rights (DSR) with Legal Clock
Citizen rights are not managed by email: with the Art. 12 clock and data location via the RoPA.
Framework / standard: GDPR Art. 12 · Arts. 15/17/20 · Art. 22(3)
Data subject rights are not managed by email and goodwill. The GDPR recognises rights of access (Art. 15), erasure (Art. 17), portability (Art. 20) and others, with an Art. 12 response deadline of one month, extensible to two.
Linedat processes each request (DSR) as a governed dossier: identity verification, right type, deadline with its clock, and assisted location of where the data subject's data lives.
A legal clock per request
Each request starts the Art. 12 deadline: one month from receipt, with the possibility of extension to two. A read-time indicator flags when a request has expired. The six right types (access, portability, erasure, rectification, restriction, objection) each have their own status lifecycle.
Data location through the RoPA
To respond to an access or erasure request, Linedat locates the data subject's data in an assisted manner by crossing the active processing activities → the linked assets → the columns with PII → the recipients. The DPO sees the map; they do not start from scratch. For the right of erasure, a linked deletion request is created.
The limits (what we do not claim)
The expiry indicator is a read-time check, not a scheduled alert. Data location is assisted — it returns the map; the final extraction is carried out by the responsible person — and it does not scan data that is not catalogued. The Art. 17 deletion is executed via a process with a cooling-off window, with manual retry if a step fails.
How Linedat helps
Linedat turns a DSR into a dossier with a clock and a map of where the data lives — not an email thread that nobody knows was handled on time.
Related capabilities
A RoPA that points to the real tables — not a disconnected spreadsheet.
PII Sanitisation Before Reaching the ModelBefore a national ID or an IBAN leaves for OpenAI, it is redacted — in the critical path, not as an option.
Audit Chain: Verifiable Cryptographic IntegrityOther catalogues store logs. Linedat stores proof — verify it with a button.