Data subject request triage guide
A triage checklist for a subject access or deletion request.
This one needs human approval before use — got it?
High-risk prompt: touches sensitive areas. Always have a human review the output before you use it. How to use AI responsibly →
When to use
When a subject access request (SAR) or deletion request lands. Never paste personal data.
Prompt template
Produce a triage checklist for a {REQUEST_TYPE} data subject request under UK GDPR. Structure: verify identity, log the request date and legal deadline, scope the search across systems (list our likely systems), identify data we may need to redact (third-party personal data, safeguarding), decide the response format, name the sign-off. This is a checklist, not legal advice.Replace each highlighted placeholder with real context. Keep names and safeguarding details out.
When to use this prompt
Reach for this prompt when you need to a triage checklist for a subject access or deletion request. It's designed for Dpo, IT lead. Typically used within Data work.
Not suitable for real-time decisions about individuals, safeguarding cases, or public claims without human sign-off.
How to use it
- 1
Gather your inputs
Have your local context, audience and goal to hand. - 2
Fill in the highlighted placeholders
Copy the template above and replace every highlighted placeholder with real, local context. - 3
Run it in your AI tool
Paste into your preferred AI assistant. Ask a follow-up if the output misses your association's tone. - 4
Work through the checklist
Tick every item before you send, publish or act on the output.
Why this prompt works
Reduces panic response to SARs and keeps them on the statutory timeline.
Worked example
Request type: subject access request
What good output looks like
A clean triage checklist ready for the DPO / IT lead to run.
Was this useful?
Sign in to leave feedback and shape which prompts stay in the library.