The Subject Access Request (SAR) feature helps the users serve personal data requests and comply with regulations like the General Data Protection Regulation (GDPR). Egnyte Secure and Govern can automatically retrieve documents containing personal information about data subjects. The export and deletion features enabled the service of notification and right-to-be-forgotten requests.
Subject Access Request Types
Notification
When the subject requests a summary of information collected about them, an Admin should submit a Notification SAR. The workflow notifies Administrators about completed requests, which can be inspected and exported.
Right-to-be-Forgotten
When a subject requests deletion of personal information collected about them, an Admin should submit a Right-to-be-Forgotten SAR. The workflow gives Administrators a one-click deletion option after the request is completed.
Create a Subject Access Request
- Open the Compliance tab in Secure & Govern.
- Click on Add Request.
- Choose the Target service time to determine how long the request will remain active before expiring.
- Provide the name of the subject of the request (first and last name are required).
- Select if the request detects data points that meet ANY or ALL of the identifiers.
- To add additional identifiers, click on Add another identifier.
-
The user will be able to choose a supported country (based on the jurisdiction configured in the Content Classification settings) or pre-selected recommendations. After selecting a jurisdiction, they will be able to search for available identifiers. Identifiers include Social Security Number, Passport Number, and National Insurance Number.
-
Once all of the relevant information has been entered, click Create request.
Upon completion of the request, the Administrator will receive an email notification that the request is ready to serve. When accessing the results, the user will have the ability to select which files they wish to take action on. Simply uncheck the files that are not required to be acted on and they will not be affected when that action is initiated. The following actions are available
- Export full report will provide a spreadsheet with a list of all the file(s) in the SAR.
- Download files will provide a download of the file(s) in the SAR (limited to a 1GB zip file).
- Deletion will move the file(s) to the trash on the source that the file is located in.
- Move will allow the user to select a destination on the source the file is located in to move the file(s) to.
- Archive will allow the user to send the file(s) to an Egnyte Archive domain (available for Egnyte and M365 sources only).
Limitations
The currently applicable export limits are as listed below:
- Summary - no limit
- Error report - 2.5M rows (50 files with 50k rows per file)