Art. 12–22 · data subject requestsNot the ticket — the record

Data subject requests,
managed from receipt to response.

Legiscope turns each request into one working record with its response timing, linked processing activities, evidence, decisions and response. Your team always knows what is open, what needs attention and what has been answered.

Book your demo →

§ 1 One request, and the workflow behind it

Art. 12(3) · one month from receipt

One automated workflow

Paste the request. About two minutes later, open the case record.

No manual case setup.
Paste the request. Legiscope extracts the available details and creates a structured case record for your team to review.
Response timing, already visible.
The standard one-month timing is calculated from the recorded receipt date, so open requests and cases needing attention are visible immediately.
The processing context stays connected.
Link the activities involved to keep the request connected to the purposes, data categories, recipients and retention already recorded.
One case from receipt to response.
Evidence, decisions, status and response dates stay together in one editable record that can be exported as CSV, DOCX or PDF.

Request · REQ-0F3A · Art. 15 access · Lovin’ Cuisine SAS

Marie Lambert — a copy of her loyalty account and order history

In progressClosedNot started

Time left

7 days left to respondDue 4 April

Received 4 March · Art. 12(3)

4 March · received4 April · due

The request, in short

She asks for a copy of the personal data held about her, naming her loyalty account and her order history. She sets no date range and mentions no other channel. It arrived by email at the shop’s general address on 4 March and was recognised as an Article 15 request the same day.

Activities considered5 / 34

A-1Loyalty programme — membership, pointsIn scope
A-2E-commerce orders — delivery, paymentIn scope
A-3Customer support — ticketsIn scope
A-4Newsletter — email, consent recordIn scope
A-5Cooking workshops — bookingsIn scope
A-6Payroll — staff onlySet aside
A-7Job applications — none on fileSet aside

Art. 30 register · the triage stays in the recordIllustrative

Article 15 asks for what you hold on the person, why, for how long and who else sees it — which is the register, read from one angle.

§ 2 The problem this solves

and why the month runs out

A rights request is a lawsuit’s
opening move, disguised as an email.

A real Article 15 request rarely comes from curiosity. It arrives while someone is preparing a case — a dismissal, a claim, a dispute — and their lawyer is assembling the file. Answer late, or from memory, and you hand the other side a documented GDPR violation before the case has even started. Legiscope makes the record the part that is already handled: the date, the scope and the answer come from the register.

Day one

Nobody calls it a request.

It is a line in a support thread, a reply to a marketing email, a letter scanned to PDF. By the time someone says “Article 15”, a week is gone — and Art. 12(3) counts from receipt, not from recognition.

With LegiscopePaste what actually arrived. The record is created from it, with the due date already on the register.

Week three

Six teams answer from memory.

One colleague answers from the CRM, another from a spreadsheet, a third from a project that ended in 2023. Nothing is wrong on purpose — there is simply no one place that says what you hold.

With LegiscopeThe Article 30 register answers, the same way every time. Correct it once and every future request answers the new way.

Eighteen months later

“Show us how you handled it.”

The authority asks in writing. The inbox has been migrated, the person who answered has left, and the only trace is a status field that says “done”.

With LegiscopeOne dossier — the facts, the dates, the activities, the material relied on — exported as PDF, DOCX or CSV.

From receipt to response

See a data subject request become a managed case.

See how Legiscope creates the case record, makes response timing visible, connects the relevant processing activities and keeps the evidence, decisions and response together for review and export.