Background
An authorized agent is a person or entity designated by a data subject (the individual whose personal data is being processed) to act on their behalf in exercising their data privacy rights.
Before fulfilling requests made by an authorized agent, according to the regulations, organizations must verify the legitimacy of the authorized agent in order to protect the data subject's privacy.
Support Authorized Agent Requests in Your Privacy Center
- Navigate to 'Privacy Center' under 'DSR handling'.
- Enable the 'Data subject type' question. Once enabled, this question will be a mandatory question in your privacy center.
- Click 'Add data subject type' and select the 'Authorized Agent' option.
- Notice that once an Authorized Agent data subject type is added, two questions will be added to your form to ensure authorized agents are asked for all necessary information:
- Authorized agent email address
- Upload file question for a Supporting document
- Email communications: By default, all email communications are sent to the authorized agent's email address, with one exception — the verification email is sent directly to the data subject to confirm their identity. You can change this default behavior in your settings so that the verification email is sent to the authorized agent instead. Navigate to DSR setup -> Rules -> chose "Send verification to agent's email address.
- The supporting document and the authorized agent's email address can be viewed in the 'Full request details' panel.
-
Export the privacy requests log: When exporting the privacy requests log, the following Authorized agent related fields will be included:
- DataSubjectType: A standardized system value that identifies the type of data subject (e.g., Authorized Agent, Customer, Employee, Job Applicant, Other).
- DataSubjectTypeLabel: A customizable label defined by your organization, displayed to end users in the public Privacy Center.