dsar-handler

What problem does it solve?

This skill eliminates the manual, error-prone work of managing Data Subject Access Requests (DSARs) across multiple global privacy regimes, reducing the risk of missed statutory deadlines, incomplete data discovery, and non-compliant exports that result in costly regulatory fines.

Core Features & Use Cases

• End-to-end DSAR workflow management: Automates identity verification, scope assessment, cross-store data discovery, machine-readable data export, and signed deletion attestation for every DSAR.
• Multi-regime statutory clock tracking: Automatically tracks response deadlines for GDPR, CCPA/CPRA, Quebec Law 25, LGPD, and HIPAA, applying the tightest applicable deadline when multiple regimes apply to a single request.
• Immutable audit evidence: Generates per-request YAML evidence files with all workflow stages, decisions, and attestations to satisfy regulator audit requirements. Use case: A SaaS company receives a GDPR access and erasure request from an EU user. This skill verifies the user's identity, scans all databases, analytics tools, and third-party processors for relevant data, generates a compliant JSON export, files a signed deletion attestation, and tracks the one-month GDPR response deadline automatically.

Quick Start

Use the dsar-handler skill to process a new Data Subject Access Request for user [email protected] under GDPR and CCPA rules, and generate the required export and deletion attestation.