Sections 34-38 of the NDPA grant data subjects several rights. The Data Subject Requests module helps you track and fulfil these requests.
Request Types
- Access - Right to obtain confirmation and access personal data
- Rectification - Right to correct inaccurate or incomplete data
- Erasure - Right to deletion of personal data
- Restriction - Right to restrict processing
- Portability - Right to receive data in a machine-readable format
- Objection - Right to object to processing, including profiling
- Automated Decision - Right regarding automated individual decision-making
Child Data Subjects
The NDPA defines a child as any person under the age of 18 (unlike GDPR's 16). Requests involving child data subjects are flagged in the system for special handling and parental/guardian verification.
SLA Tracking
Requests have a 30-day response deadline by default. The system tracks due dates and highlights overdue requests. Extensions can be recorded with reasons.