Data Subject Request Ops Review

Use this skill to convert DSAR, access, export, correction, deletion, consent withdrawal, identity verification, legal hold, subprocessor, and privacy SLA questions into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify request type, jurisdiction, data subject, account/workspace scope, identity proof, authorized agent status, systems touched, retention/legal exceptions, SLA deadline, and communication owner.
2. Read references/data-subject-request-ops-patterns.md.
3. Classify the situation as access/export, correction, deletion, restriction, objection, consent withdrawal, portability, authorized-agent request, minor request, or escalated/legal-hold request.
4. Define verification, scope resolution, system inventory, execution order, exception handling, subprocessor workflow, response package, audit evidence, and SLA monitoring.
5. Produce DSAR operating plan, state machine, decision table, event schema, request checklist, evidence package, and escalation map.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails