OneTrust Data Subject Rights Management

Lifecycle Automation from Request Intake to Fulfillment and Record Keeping

To comply with the new data subject rights set forth in the GDPR, organizations should make it easily accessible for data subjects to submit requests. OneTrust provides a standardized way for privacy programs to receive requests, and manage them in a centralized system. OneTrust provides organizations with the ability to tailor a branded web form – linked from the company’s privacy policy web page – as well as the ability to receive notification of a submitted request, validate the identity, and automatically file an extension if the one-month deadline is approaching. When the request is fulfilled, the organization must securely transmit the data to the individual, link it to the underlying data map to efficiently fulfill the request, and generate the proper documentation and evidence should a regulator inquire about the request.