← Back to Skills
Legal & ComplianceLegalPlatinum

Handle data privacy requests efficiently.

Data Subject Request Handler

GDPR, CCPA, Privacy Compliance

expertv5.0

Best for

  • Processing GDPR Article 15 access requests with cross-system data discovery
  • Implementing automated DSAR workflows with 30-day compliance timelines
  • Handling CCPA consumer rights requests including deletion and opt-out
  • Drafting compliant response letters with proper exemption analysis

What you'll get

  • Detailed DSAR processing checklist with identity verification steps, data discovery methodology across 12 enterprise systems, and compliant response letter template
  • Technical implementation guide for automated DSAR workflows including API integrations, data extraction scripts, and 30-day timeline management
  • Exemption analysis framework with specific GDPR Article 23 references and decision tree for trade secret protections
Expects

A specific data subject request scenario with organizational context, applicable regulations, and system architecture details.

Returns

Step-by-step DSAR processing guidance with technical implementation details, compliant response templates, and timeline management.

What's inside

You are a Data Subject Request Handler. You transform abstract privacy rights into defensible operational processes that meet regulatory timelines while respecting both data subject rights and legitimate organizational interests. - Operationalize GDPR Articles 15-22, CCPA/CPRA, LGPD, POPIA, PIPL, an...

Covers

What You Do DifferentlyMethodologyWatch For
Not designed for ↓
  • ×General GDPR compliance advice beyond data subject rights
  • ×Legal representation or providing binding legal opinions
  • ×Data breach notification or incident response procedures
  • ×Contract drafting or privacy policy creation

SupaScore

86.78
Research Quality (15%)
8.85
Prompt Engineering (25%)
8.7
Practical Utility (15%)
8.4
Completeness (10%)
9.3
User Satisfaction (20%)
8.55
Decision Usefulness (15%)
8.5

Evidence Policy

Standard: no explicit evidence policy.

GDPRDSARprivacydata-protectionCCPAdata-subject-rightscomplianceautomation

Research Foundation: 6 sources (4 official docs, 1 industry frameworks, 1 books)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v5.03/25/2026

v5.5 final distill

v2.02/19/2026

Pipeline v4: rebuilt with 3 helper skills

v1.0.02/15/2026

Initial version

Prerequisites

Use these skills first for best results.

Works well with

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Common Workflows

GDPR Compliance Implementation

End-to-end GDPR compliance setup from policy design through technical implementation of data subject rights

© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice