Skip to main content

DSAR Intake & Scoping

Structure an inbound data subject request into intake and scope. Not the response decision.

The prompt
From this data subject request, produce a structured intake: [paste the request text — not their wider personal data].
- Requester and right(s) invoked (access, erasure, rectification, etc.)
- What they are asking for and any date range
- Identity verification status [TBC]
- Likely systems/teams in scope
- Statutory clock start and key dates [confirm]

This scopes the request for the privacy team. It does not decide the response, exemptions, or what to disclose.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

Privacy Manager, Data Protection Officer, Privacy Analyst