PrivoraPrivora
Request handling workbook

workbook

Prepare and control a data subject request response

Prepare one minimal, owner-led response pack before approved facts and decisions are entered into the Privora Pro request record.

Non-persisted working reference

Use this workbook to prepare notes, evidence references, owners, decisions, and follow-up. Entries are temporary in this browser. Nothing entered on this page is saved. It is not submitted; enter the approved record in Privora Pro when the review is complete.

Browser-local worksheet

Prepare working answers

Entries are temporary in this browser. They are not submitted or saved. Enter approved records in Privora Pro.

Workbook preparation actions

0 of 58 prepared

Nothing is saved. Mark each field prepared when its working answer is ready.

Prepare and control a data subject request response

This workbook supports preparation and review. It is not the delivery package or the legal decision record. Treat completed pages as confidential. Privora Pro remains the operating record after reviewed information is entered.

Data-minimisation rule: Do not record passwords, secrets, full identity documents, raw sensitive data, response datasets, live credentials, or unnecessary personal data here. Keep source and response material in approved restricted systems and write only safe references on these pages.

How to use the working pages

The request owner coordinates the workbook. Contributors complete only their assigned search or fact section. The DPO or privacy lead reviews classification and restrictions. The response approver controls delivery and closure. Transfer approved facts, dates, status, and decisions into Privora Pro; do not treat a completed workbook as approval.

Use one workbook version per request cycle. Date material decisions. Mark assumptions and missing owners. Apply proportionate identity verification and minimise evidence copies throughout the workflow.

Page 1 — Intake summary

Capture enough to route and protect the request without reproducing the full message.

Add a concise working answer.

Privora Pro request reference

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Date received by the organisation

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Original intake channel

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Approved requester contact record reference

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Requester's words summarised without narrowing meaning

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Communication, accessibility, language, or safety needs

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 2 — Ownership and authority

Add a concise working answer.

Accountable request owner

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

DPO or privacy reviewer

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Identity-check reviewer

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Authorised response approver

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Alternate owner for absence or escalation

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Conflicts, segregation issues, or specialist authority required

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 3 — Acknowledgment and communication

Choose the relevant date.

Acknowledgment sent date

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Approved acknowledgment channel and evidence reference

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Select the current decision.

Is clarification needed to make the request workable?

Not prepared

Select the current decision.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Plain-language clarification question and work continuing meanwhile

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 4 — Minimal identity check

Start with an existing authenticated relationship or low-intrusion method. Increase assurance only where disclosure or action risk requires it.

Capture the working notes, source, and decision context.

Risk if information is disclosed or action is taken for the wrong person

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Proportionate identity method used or proposed

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Select the current decision.

Identity check result

Not prepared

Select the current decision.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Identity review date

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Restricted identity evidence reference, not a copied document

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Representative authority review where applicable

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 5 — Classification and scope

Select every check that is complete.

Request rights or actions in scope

Not prepared

Select every check that is complete.

Request rights or actions in scope

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

People, accounts, identifiers, and relationships in scope

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Relevant date range and events

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Business units, products, processors, systems, and record sets in scope

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Reviewed exclusions, assumptions, and unresolved boundaries

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 6 — Deadline control

Set the organisation's reviewed deadline from current official sources and qualified review. The product due date is an operational target to reconcile, not proof of the legal rule.

Choose the relevant date.

Organisation's reviewed deadline

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Official or sector source, locator, review date, and qualified reviewer

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Internal search completion milestone

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Restriction and redaction review milestone

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Approval and delivery milestone

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Qualified extension position, authoritative basis, and communication plan if applicable

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Source: Nigeria Data Protection Act 2023, Section 34(1)–(2) and section 38(2), official PDF pp. A738–A740

Page 7 — Search-owner matrix

Assign each source separately. A portal contributor completes the scoped search and returns context; the contributor does not decide the request.

Prepare and control a data subject request response: table 1
System or record setOwnerSafe identifiers and periodSearch methodDue dateResult or evidence referenceGap or escalation

Capture the working notes, source, and decision context.

Acceptance criteria shared with search owners

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Missing owners, unavailable systems, processor dependencies, and escalation

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Context and review of any documented nil result

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 8 — Response inventory

Do not paste the response data. Use safe references and decision-level descriptions.

Prepare and control a data subject request response: table 2
Item or categorySource referencePeriodRequester data confirmedOther-person dataRestriction reviewFormatStatus

Select every check that is complete.

Response inventory controls

Not prepared

Select every check that is complete.

Response inventory controls

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Purpose, categories, recipients, retention, source, rights, or automated-decision information to include

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 9 — Restriction and redaction decisions

Use qualified review. Record the decision at item or category level and retain the unredacted source under appropriate access.

Prepare and control a data subject request response: table 3
ItemIssue or competing rightSource and rationaleDecision-makerActionQuality reviewer

Capture the working notes, source, and decision context.

Restrictions, partial disclosure, or alternative safeguards

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Select every check that is complete.

Redaction quality checks

Not prepared

Select every check that is complete.

Redaction quality checks

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Automated decision, objection, or portability review where applicable

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 10 — Communication log

Prepare and control a data subject request response: table 4
DateDirectionChannelPurposeSafe evidence referenceOwnerFollow-up

Capture the working notes, source, and decision context.

Accessibility, failed contact, misunderstanding, or safety issues

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Next plain-language requester update and owner

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 11 — Approval readiness

Select every check that is complete.

Response approval checks

Not prepared

Select every check that is complete.

Response approval checks

When approved, record the result in the matching Privora Pro workflow

Select the current decision.

Approval decision

Not prepared

Select the current decision.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Approver rationale, conditions, and unresolved items

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Approval date and authorised approver

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 12 — Delivery control

Add a concise working answer.

Approved delivery channel and assurance level

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Recipient address or account validation method

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Delivery date

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Add a concise working answer.

Safe delivery evidence reference

Not prepared

Add a concise working answer.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Failed delivery, retry, access support, or other exception

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Page 13 — Closure and lessons

Select the current decision.

Reviewed final status

Not prepared

Select the current decision.

When approved, record the result in the matching Privora Pro workflow

Choose the relevant date.

Closure date

Not prepared

Choose the relevant date.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Promised actions, corrections, restrictions, or follow-up owners

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Request-record access and retention instruction

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Capture the working notes, source, and decision context.

Data map, retention, search, notice, training, or control improvements

Not prepared

Capture the working notes, source, and decision context.

When approved, record the result in the matching Privora Pro workflow

Select every check that is complete.

Operating-record completion

Not prepared

Select every check that is complete.

Operating-record completion

When approved, record the result in the matching Privora Pro workflow

Sources and review boundary

Source: Nigeria Data Protection Act 2023, Sections 34–38, official PDF pp. A738–A740

Source: Privora Pro workflow source of truth, Implemented DSAR and portal-task workflow behavior; reviewed 2026-08-12

Privora Pro remains the operating record after the request owner and authorised reviewers enter approved information.

Download this operating resource

Download the workbook

Use PDF for review and print. Use the editable DOCX when the team needs a working copy.