Creating an End-User Subject Access Request in Request Manager

When an end user makes a request to receive data or to delete data from your environment that contains personally identifiable information (PII), you can create a request in Request Manager to manage and fulfill the request. If the end user requested to receive data, you can redact the PII from the data before it is sent to the end user.

You can also create requests when you resolve risks. For information on resolving risks, see Resolving Risks Discovered in Data Sources.

Before You Begin

Gather the following information before you create the request:

  • The email address of the end user making the request.

  • The types and values of the PII that the end user wants to identify in the data sources.

Procedure

  1. From the navigation pane, go to Activate.

    The Activate page appears.

  2. Under Review, click Request manager.

    The Request manager page appears.

  3. In the upper-right corner of the page, click Add request.

    The Add request dialog box appears.

  4. In the Name box, enter a name for the request.

  5. Export or delete the data that contains the end user PII:

    • To export the data, select Export.

      Data that contains PII is exported and delivered to the user who made the request. The option to redact PII is available for exported data.

    • To delete the data from the data source, select Delete.

    • To delete the data from the data source and from the backup, select Delete, and then select the Delete from backup check box.

      Important

      The data is exported or deleted after the request is reviewed and approved.

  6. To redact PII in the data before the data is exported, move the Redaction toggle key to the right.

    The PII that matches the PII defined in the request is redacted in the documents that are returned by the request. During review, reviewers can redact additional PII or restore redacted information at the document level.

  7. To enable document chaining, move the Document Chaining toggle key to the right.

    If any additional entities are found in a document, any other documents that contain the additional entities are also included in the result set of documents for the request.

  8. In the Requester email box, enter the email address of the user who initiated the request.

  9. From the Select personal entities list, select the type of entities that the end user wants to identify in your data sources.

    For example, to find a phone number, select the Phone number entity type.

  10. Click OK.

    A box appears for each entity type that you selected.

  11. In each entity type box, enter the value provided by the end user.

    For example, enter 5555555555 in the Phone number box.

    Tip

    If you need to enter multiple values for a single entity type, to the right of the entity box, click the plus button.

  12. Click Save.

What to Do Next

Associate the request with a project and assign reviews and approvers to the request. For more information, see Configuring a Request.

For more information about entity types, see Personally Identifiable Information (PII) Entity Types.

Loading...