DSAR Intake & Scoping
Structure an inbound data subject request into intake and scope. Not the response decision.
The prompt
From this data subject request, produce a structured intake: [paste the request text — not their wider personal data]. - Requester and right(s) invoked (access, erasure, rectification, etc.) - What they are asking for and any date range - Identity verification status [TBC] - Likely systems/teams in scope - Statutory clock start and key dates [confirm] This scopes the request for the privacy team. It does not decide the response, exemptions, or what to disclose.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Privacy Manager, Data Protection Officer, Privacy Analyst
More for Data Privacy (DPO)
- Data Privacy Critical Guardrails - Read First
- DPIA Scaffold Draft
- Privacy-by-Design Review Prep
- ROPA Entry Draft
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.