The requestor receives an email at the email address that they used when submitting the request. To verify their identity they simply click the included link. Once the link is clicked the data subject request will move to data extraction in your DataGrail Platform and you will receive an email notification.
When a requestor wants all their data deleted from your systems, they will submit a deletion request. The purpose of a deletion request is to remove any of the requestor's personally identifiable information from systems that your organization uses.
How does email intake work?
Understanding the location of a Data Subject is important when identifying which policy is applicable to begin processing the request.
The DataGrail DSR intake API is built to enable customers and integration partners to programmatically create and manage privacy requests from anywhere. Whether originating from a web or mobile application or a bulk upload through a script, you can create a DSR in the DataGrail platform from wherever you see fit.
DataGrail supports many language translations on Privacy and Do Not Sell Intake Forms and corresponding email templates.
Personal data is sometimes keyed using different identifiers that are not email, such as unique identifiers, phone numbers or cookies. This article will walk through how to set up the Multiple Identifier feature and find all personal information from data subjects stored in data systems, while eliminating the possibility of missing data.
By default, DataGrail verifies a data subject's identity through a verification message sent to their email. DataGrail also offers "Smart Verification" functionality, with an increased number of data points that must be verified in order to process a Privacy Request.
If your company utilizes the DataGrail-enabled toll-free number to intake privacy requests, all calls to this toll-free number will create a privacy request in DataGrail.