GDPR DSAR EN - data subject rights requests (Art. 12, 15-22)

Philosophy

A rights request is a clock plus a legal assessment, not an automation. The skill classifies, tracks the deadline and produces a draft; the fulfil/refuse decision and the act of sending belong to the controller. Erasure/export is irreversible/outward => always a human (governance boundary).

Step 0 - Identity and deadline