Sections 34-38 of the NDPA grant data subjects several rights. The Data Subject Requests module helps you track and fulfil these requests.
Request Types
- Access — Right to obtain confirmation and access personal data
- Rectification — Right to correct inaccurate or incomplete data
- Erasure — Right to deletion of personal data
- Restriction — Right to restrict processing
- Portability — Right to receive data in a machine-readable format
- Objection — Right to object to processing, including profiling
- Automated Decision — Right regarding automated individual decision-making
Child Data Subjects
The NDPA defines a child as any person under the age of 18 (unlike GDPR's 16). Requests involving child data subjects are flagged in the system for special handling and parental/guardian verification.
SLA Tracking
Requests have a 30-day response deadline by default. The system tracks due dates and highlights overdue requests. Extensions can be recorded with reasons.