Subject Access Request
- Barnaby Murtagh (Unlicensed)
- Adam Carter
What does it do?
This feature allows users to search all data on the platform by a specified email address or telephone number which can then be filtered on an advertiser.
Users then have the option to download this data and remove this data from the platform.
Actions | Description | Acceptance Criteria | |
|---|---|---|---|
| 1 | Admin Users can select either to search on email or telephone. | From the dropdown menu the user can either select email or telephone. | Once an option is selected this will display email or telephone. |
| 2 | Admin users has the option to input a value to search on. | The user will have the option to type either an email or telephone number. | Once inputted the data will then be filter by this value. |
| 3 | Admin Users can then filter the data by all advertiser or by a single advertiser. | This will allow the user to filter the data by all advertiser or a selected advertiser. | Once this option has been configured this will filter the search request either by all advertiser or by a single advertiser. |
| 4 | Download data. | Users are able to download the data related to the access request. | Once downloaded the download of the data will be available via the export . |
| 5 | Request data to be removed from the platform. | Users are are able to ‘Delete’ data related to specified email or telephone values and by all or a single advertiser. | Once deleted this will remove all data associated to that specific email or telephone number. |
Who would use it?
Content SYndication
Why would clients find this useful?
Allows users to flag email or telephone contacts that may be of concern.
Allows data to be removed if a GDPR request is triggered by a customer.
An example of how it would be implemented?
An advertiser wants to audit what a specific user has actioned on the platform.
Admin User in the platform would access the System > Subject Access Request area.
Admin Select if an email or telephone number is going to be used to identify the user.
Specify ‘Email’ or ‘Telephone’ value eg. userx@advertisermail.com or 07530987655
From this screen, the admin is able to specify the Advertiser from a dropdown.
Click View
All data relating to the specified value will appear in the results section
Click ‘Download’ to download all the data as a CSV
Click ‘Delete’ to delete the data from the platform. NB: The data once deleted can not be re-instated.
Key talking points:
If clients are looking for a way to be able to manage the removal of data from a GDPR request.
If clients are looking to audit or flag behaviour based on a single account (email/telephone) if inappropriate behaviour is suspected or detected.