Data subject rights

Impact Privacy knows data subject rights. We review your processes to ensure compliance with complex data subject rights requirements across countries and business activities. Our data subject rights service stands on four pillars: transparency, subject access requests, other data subject rights, and complaints.  

Transparency – Impact Privacy develops public-facing privacy notices (transparency statements or privacy statements) in plain language for real people. We make sure the right information is provided to data subjects at the right time, so they understand what happens to their data and know who to contact if they need help. This kind of transparency is vital for patients when it comes to healthcare choices.

Subject Access Requests – We design your Subject Access Requests (“SAR”) response processes so your business can meet obligations around providing access to data subjects. 

Other Data Subject Rights – Impact Privacy helps create and manage responses and processes for other Data Subject Rights (“DSR”), such as deletion, cessation of processing, portability, automated processing and correction of inaccuracies. 

Complaints – We design policies and procedures for responding to privacy and data protection complaints. The steps include investigation, management, and response to complaints within prescribed timelines to ensure issues do not end up with regulators. 

Why Choose Impact Privacy?  

Impact Privacy identifies high-risk privacy and data protection exposure of your data subjects and your business. We dedicate ourselves to getting to know you and your team so we can provide workable solutions based on proven strategies in Europe, Canada, UK, US, and beyond. We believe in a flexible, client-focused approach to our work.   

Impact Privacy is on your team.