You hold personal information about your customers, so you have duties around it. Under Compliance in the menu are three tools that cover the common ones.
Audit log
A record of every change made in the portal: what, by whom, when and to which customer. Read
Subject access request
When a customer asks “what do you hold on me?”, find them and export everything as a PDF. Read
Scrub data
When a customer asks you to erase their data, anonymise them everywhere. Read
A typical request
- A customer emails to ask for their data, or to be erased.
- You confirm it really is them, such as by replying to the email address on their account.
- For access, use Subject access request and send them the PDF.
- For erasure, consider doing an access export first, then use Scrub data.
- Keep your reply with your records.