DSARs — Handling People's Data Requests

When someone asks about their personal data ('What data do you have on me?'), that's a Data Subject Access Request (DSAR). PDPL gives people 8 rights over their data — access, correction, deletion, portability, and more. This section helps you track, process, and respond to these requests within the legal 30-day deadline. The 'Consent' tab logs who said yes (or withdrew yes) to data processing. The 'Breaches' tab is for reporting data leaks — you must tell the authorities within 72 hours.