Complete AI Training
Sign inGet my AI kit

Your job's AI kit

Get your AI kit

Tell us who you are and what you do. We show you your kit right away and email you the link: skills, prompts, AI agents, MCP servers and courses for your job.

500+ jobs ready, and we make a kit for any other job. No payment needed to look.

Share

AI agent for data protection officers

Data Subject Request Fulfillment Agent

Complete and lawful responses to every data subject request on time

Data Subject Request Fulfillment Agent: what goes in, what the agent does and what you get

What it does

Requests from people to see, correct or delete their data come with legal deadlines, and records hide in systems nobody remembers. When a request arrives, this agent logs it, starts the deadline clock and drafts an identity check. Once the person is verified, it searches each system on the data map for their records and asks system owners to confirm. It checks that every mapped system has responded and chases those that have not. If it finds records in a system missing from the map, it adds that system. It compiles the results. For access requests it drafts the response package with third-party data redacted. For deletion it lists legal holds and retention exceptions with reasons. The DPO approves every response. Edge case: the person has an open complaint, so some records must be kept, which the agent notes in the reply.

How it works

Follow the arrows from top to bottom. The orange dashed arrow is the loop: when a check fails, the agent goes back and tries again.

Start and resultWhat it doesA check on its own workWaits for your OKGoes back and retries
Yes, continueApprovedNo 1 STARTS WHEN Request received 2 DOES Log and start deadline 3 USES A TOOL Draft identity check 4 USES A TOOL Search systems and ask owners 5 CHECKS THE RESULT Have all mapped systems responded? If not: chase remaining owners. Back to step 4. 6 DOES Compile response with redactions or deletion plan 7 YOU APPROVE DPO approves response 8 RESULT Response sent and logged
Read the steps as a list
  1. Request received
  2. Log and start deadline
  3. Draft identity check
  4. Search systems and ask owners
  5. Have all mapped systems responded?If not: chase remaining owners. Back to step 4.
  6. Compile response with redactions or deletion plan
  7. DPO approves responseThe agent waits here for your OK.
  8. Response sent and logged

How it decides

It searches every mapped system and applies retention and legal hold rules.

  • Deadline 30 days from verification
  • Legal hold: keep and explain
  • Third-party data: redact

Make it yours

Every agent is a starting point. You choose these settings for your own situation.

  • Deadlines by law
  • Systems in scope
  • Identity rules
  • Response template

What keeps you in control

It always asks you first

  • Responses
  • Deletions

Hard limits

  • Never deletes data itself
  • Never sends without approval

It stops when

  • Done: response sent
  • Stop: identity not verified

Set it up

We guide you through the set-up, step by step

Members get the full set-up guide for this agent. No technical skills needed: you copy, paste and upload.

10 minto set it up in your AI
5 AIsChatGPT, Claude, Copilot, Gemini, Grok
  • One set of instructions to paste into your AI, with the clicks for ChatGPT, Claude, Microsoft 365 Copilot, Gemini and Grok
  • The agent then walks you through connecting your own data, one source at a time
  • A downloadable copy with the flow chart, the rules and the full guide
Get access to this agent

An example run

What happensAn access request verified on May 2 touched 11 mapped systems. After a week, 9 owners had confirmed, so the completeness check failed. The agent chased the other two. One owner replied and the other pointed to a marketing tool that was not on the data map, which held 40 records. The agent added it to the map, compiled the package, and the DPO approved it on May 20.

More agents for data protection officers