TRUST

Data Subject Rights

Route rights requests through identity verification, scope classification, system ownership and accountable fulfilment.

Owner: Privacy & Service Governance
Scope: Requests concerning personal data processed by the service
Status: Published control statement

01 / CONTROL

Control model

Intake

Capture request type, requester identity/contact and enough context to locate the relevant service scope.

Verification

Verify requester/authority proportionately before disclosing or changing personal data.

Fulfilment

Coordinate export, correction, restriction or other supported action with the responsible controller/system owner.

Evidence

Record request state, decision, fulfilment date and applicable exception/retention basis.

02 / BOUNDARY

Responsibility boundary

Available rights and response obligations depend on applicable law, controller role and the customer deployment; the site does not promise an unsupported universal workflow.

03 / ESCALATION

Evidence and escalation

Submit a rights request with sufficient identity/contact and service context; do not include more health data than necessary to locate the relevant record.