How might we create a data subject request procedure that applies in different, sometimes conflicting, jurisdictions?
WHAT WE ACHIEVED
Pragma’s data subject request procedure gives their information officers step-by-step instructions on what to do when they receive a request from a data subject.
From an access request, a request to be ‘forgotten’ to withdrawing consent.
It has been a pleasure working with Novation. Their ability to translate legalese and jargon into plain business language, along with their schematic processes, has been a great help with compiling our data subject request process.
Pragma
How we put the ‘fun’ in #funlaw
Diagrams
make the process come to life in an easy-to-follow and on-brand visual.
Tables
indicate the jurisdictional differences in responding to a request, so the guide is easy to reference, and processes are easy to compare.
Definitions
are highlighted and important information is emphasised in colour boxes.