Data subject rights & incidents — found from sitemap — Ethyca

Cited by

Facts read from this source

• Helios discovery Report an error

  “Helios performs continuous, automated scanning of an organization's data systems to discover where personal data exists, what categories it belongs to, and how it maps to regulatory definitions. This is not a one-time audit. It is an ongoing process that detects new data stores, schema changes, and data flows as they emerge.”

• Fides orchestration Report an error

  “Fides, Ethyca's open-source privacy engineering framework, provides the orchestration layer that defines how DSARs are fulfilled across different jurisdictions, data categories, and system types.”

• Lethe fulfillment Report an error

  “Lethe automates DSAR fulfillment including data extraction, redaction, and de-identification across connected systems.”

• Astralis AI enforcement Report an error

  “Astralis applies policy enforcement directly to AI systems in real time, including the nuanced determinations involved in DSAR fulfillment: whether a specific data element should be disclosed or redacted, whether a record belongs to the requesting individual or a different data subject, and whether a particular data category falls within the scope of the applicable regulation.”

• Identity verification Report an error

  “The system assesses the sensitivity of the data involved and the channel through which the request was submitted, then applies the appropriate verification method. A request submitted through an authenticated account portal requires less additional verification than one submitted via email.”

• Platform scale Report an error

  “Ethyca's platform is built to handle DSAR fulfillment at enterprise scale, orchestrating automated discovery, extraction, redaction, and delivery across every connected system in an organization's data estate.”

• GDPR deadline Report an error

  “Under GDPR Article 12(3), controllers must respond to a data subject access request within one calendar month of receiving the request. This deadline can be extended by two additional months where requests are complex or numerous”

• CCPA deadline Report an error

  “Under CCPA, businesses must acknowledge receipt within 10 business days and deliver the substantive response within 45 calendar days. A 45-day extension is available if reasonably necessary”

• GDPR decline Report an error

  “Under GDPR Article 12(5), a controller may decline a data subject access request only in specific, narrow circumstances. This is permitted when requests are manifestly unfounded or excessive, particularly where they are repetitive.”

• CCPA decline Report an error

  “Under CCPA, businesses may decline to fulfill a request if they cannot verify the consumer's identity. They may also decline requests that are made more than twice in a twelve-month period.”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Integrations & automation
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Integrations & automation
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage