Data Subject Requests (ARCOP)
This workshop prepares the organisation to handle requests from people exercising their rights: intake channels, identity verification, a clear procedure and an end-to-end test.
Workshop 7 video
Walkthrough of the workshop and its tasks — coming soon
What ResGuard provides
- Your own Request Portal: an online intake channel for each entity, with spam protection, e-mail verification of the requester and an automatic reference number
- Every request in one register, from receipt to closure
- Response times tracked automatically: each request shows how long it has been open and turns orange and red well before the deadline
- Daily e-mail notifications as long as a new request has not been taken on
- Template for the request handling procedure
Workshop tasks
-
1. Rights & deadlines
The rights and their response deadlines are predefined in ResGuard: every request shows how long it has been open and warns you well before the deadline.
In ResGuard: Requests -
2. Intake channels & verification
Use your ResGuard Request Portal as a compliant intake channel: individuals submit requests online, confirm their e-mail address and receive a reference number automatically. Requests received by e-mail or post go into the same register.
In ResGuard: Request Portal -
3. Handling procedure
Document the steps: log and acknowledge, verify identity, search all systems using the RoPA, respond, document refusals and close.
In ResGuard: Policy Framework -
4. Manage requests in ResGuard
Every request is registered with type, requester and date received. ResGuard tracks each step and notifies you daily about new requests, so no deadline is missed.
In ResGuard: Requests -
5. End-to-end test
Simulate an access request, run through the full procedure and time each step against the legal deadline.
In ResGuard: Requests -
6. Workshop review & close-out
Review the results, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind in Chile
- Law No. 21.719 grants the ARCOP rights: access, rectification, erasure, objection and portability, plus temporary blocking of processing and the right not to be subject to automated decisions.
- Requests must be answered within 30 calendar days, extendable once. Confirm the deadlines and cases in the text in force and in the Agency's instructions.
- Exercising these rights is generally free of charge. If a request is refused or not answered, the data subject can file a complaint with the Agency.
Expected result
- Overview of rights and deadlines documented
- Intake channels and identity verification defined
- Procedure approved in the Policy Framework
- Requests managed in the Requests module and test completed
ResGuard modules: Requests, Policy Framework