What it does
GDPR Data Subject Request Handler helps legal and operations teams process GDPR Data Subject Access Requests (access, deletion, portability) within the 30-day Article 12(3) deadline. It parses incoming DSAR emails, queries Postgres and HubSpot for subject data, builds a per-system data inventory, determines deletion scope with legal-hold awareness, and generates GDPR-compliant response drafts referencing the relevant articles. Deletion requests always require human approval before execution — a non-negotiable guardrail. All operations are logged for audit. Works offline with mock fixtures for evaluation; connects to live Postgres, HubSpot, and SMTP credentials for production use.
Example prompts
- Run the full DSAR pipeline for this request email
- Parse this DSAR email and tell me the request type and requester
- Query all systems for data belonging to this email address
Before you connect
The credentials this agent will ask you for — the full setup is on the Setup tab.
Needs 4 optional credentials to connect. See setup
