Route requests correctly
Subject to applicable conditions, GDPR provides rights including access, correction, erasure and restriction. Appropriate identity checks protect against unauthorised disclosure. Clear responsibilities between businesses and service providers support handling these requests.
Account for derived content
Correcting a source may leave older summaries containing the previous information. Erasure requests need to consider originals, search indexes, stored excerpts and other derived content. Backups and statutory retention duties require separate rules.
In AI Link, synchronised sources and stored content determine which processing steps are affected. Documented data routes and deletion processes provide the basis for implementation in each deployment.
Walk through a test case
A test case with fictional personal data makes the data lifecycle verifiable. Information is traced through an approved workflow, followed by tests for correction and deletion. Documented results and exceptions reveal potential improvements before a real request arrives.
Sources & further reading
Original research, provider documentation and further reading on the concepts and figures discussed here.