Skip to main content
Public Portals · Data Subject Rights

Enable the DSAR portal and handle requests

Updated on 3 min Open in Cenedril

Goal Enable the public data subject rights portal, share the portal link with data subjects, and assign, answer and close incoming requests within their deadline.

In Cenedril you enable the public data subject rights portal (DSAR) in the Data Privacy Assistant under Data Subject Rights: there you decide who may handle requests and switch the public portal on with a toggle. Cenedril then generates a public link you can share with data subjects or add to your privacy notice. Incoming requests appear under Documentation → Data Subject Rights Management, where you assign, answer and close them within their deadline.

Enable the portal

Open Data Subject Rights in the Data Privacy Assistant

Open the Data Privacy Assistant and select the Data Subject Rights section. The Configure Data Subject Rights Management page shows two areas: Access Management and Public Portal.

The configuration page with the “Access Management” and “Public Portal” areas.

Choose who handles requests

Under Access Management, select the team members who may handle requests and conversations. The privacy responsible person and any data protection officer are already included and cannot be removed. If portfolio users with documentation access are available, they appear in their own list below.

Switch the public portal on

In the Public Portal area, turn the Enable Public Data Subject Rights Portal toggle on. The Public Portal URL field then appears with the ready-made link.

The enabled toggle reveals the public portal URL with the “Copy” button.

Copy the portal link and save

Click Copy next to the URL and share the link with data subjects or add it to your privacy notice. Then save the configuration with the Save button.

Result: the portal is active, the people who handle requests are set, and the public link is ready to share.

Handle requests

Open Data Subject Rights Management

Under Documentation, open Data Subject Rights Management. The page shows the Total Requests, Active Requests and Overdue stats at the top, with the filters and the list of all incoming requests below.

The management page with stats, filters and the request list including status and deadline.

Filter and open requests

Narrow the list when needed with the Status, Request Type and Assigned To filters. Each entry shows the data subject, the request type, the status and the time left. Use View Messages to open a request’s detail view.

Assign and answer a request

In the detail view, use Assign to give the request to a handler. Under Text Templates pick a prepared reply, refine it in the Your Response field and attach files if needed. Send Response sends the message to the data subject.

The detail view with conversation, text templates and the “Assign”, “Extend Deadline” and “Close Request” actions.

Control the deadline and close the request

When you need feedback from the data subject, send the message with Send & Stop Clock. The request then moves to Awaiting Response and the countdown pauses. If the statutory deadline is too short, extend it with Extend Deadline by entering days and a reason. Once the request is done, close it with Close Request.

Result: the request sits in the Closed status, the entire conversation and all attachments are recorded in Cenedril, and the handling is documented end to end.

Frequently asked questions

Who can see and handle incoming requests?

Only the people you selected under “Access Management” in the Data Privacy Assistant. The privacy responsible person and any data protection officer are included automatically. Other team members see only an anonymized overview on the management page, without names or request IDs.

Do data subjects need a Cenedril account?

No. Data subjects open the public portal link, choose the type of their request and submit it directly. To continue the conversation later they get their own access to their request, without an account.

What does “Send & Stop Clock” do?

When handling a request requires feedback from the data subject, this send pauses the deadline. The request moves to the “Awaiting Response” status and the countdown is held until the person replies.

Can the statutory deadline be extended?

Yes. In the detail view, “Extend Deadline” opens a dialog where you enter the additional days and a reason. The reason is recorded with the request.

How does the portal know our company details?

The public portal automatically shows your company logo and name from your profile. If the portal is not enabled, data subjects see a notice that it is unavailable.