What problem does it solve?
Handling GDPR data subject access and deletion requests manually is slow, error-prone, and risky under a statutory deadline. This Skill automates the daily sweep: it finds new requests in Gmail, verifies requester identity, locates all of the subject's data in Postgres read-only, and compiles a report for legal to approve.
Core Features & Use Cases
- Inbox Sweep: Scans Gmail daily for new access, deletion, or erasure requests, skipping threads already labeled as actioned.
- Identity Verification: Matches requester details against account records and flags unverifiable requests to legal instead of proceeding.
- Read-Only Data Inventory: Queries every Postgres table keyed to the subject with SELECT-only statements, following foreign keys until coverage is complete.
- Report Compilation: Creates one Google Doc per request with a data inventory, SLA deadline, verification notes, and a recommended action, then flags it to the legal review channel.
- Use Case: A privacy team receives a deletion request by email. The next daily run verifies the requester, inventories their rows across users, orders, invoices, and consent tables, and posts a Google Doc with a recommended action to legal before the SLA expires.
Quick Start
Ask the agent to check the privacy inbox for new data subject requests and compile reports for any verified ones.
