| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 868 |
| Technical Name |
gb_dsar_subject_access_request_workflow |
| License | OPL-1 |
| Website | https://gencbaris.com/odoo_plugins/ |
| Versions | 18.0 19.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 868 |
| Technical Name |
gb_dsar_subject_access_request_workflow |
| License | OPL-1 |
| Website | https://gencbaris.com/odoo_plugins/ |
| Versions | 18.0 19.0 |
DSAR / Subject-Access-Req
Log, track and fulfil UK GDPR Subject Access Requests within the 1-month deadline
Handling Subject Access Requests in email threads and spreadsheets is how compliance teams blow the statutory deadline. This module gives you a complete DSAR workflow: log a request, verify identity, locate where personal data is held, redact third-party data and respond — all against a computed UK GDPR one-month due date with overdue and at-risk flagging. It complements a GDPR privacy app by adding the operational rights-request engine.
Key Features
Full DSAR lifecycle
New → Identity Check → Locating Data → In Review → Responded / Refused, with mail-thread tracking and scheduled activities at every step.
All rights, not just access
Access, rectification, erasure, restriction, portability and objection requests — each handled with the right UK GDPR deadline logic.
Deadline engine
A computed statutory due date from the one-month default, with the permitted two-month (60-day) extension capped and validated, plus on-track / at-risk / overdue SLA states.
Data location register
Record every place personal data was found — model, record reference, category and lawful basis — with a found / redacted / included / excluded state and special-category and third-party flags.
Subject matching
A helper scans contacts by email and name to surface likely matching records and auto-creates location lines for the subject's own res.partner data.
Disclosure pack & portability
Build a structured access pack with per-category counts and a pre-filled response summary, plus a machine-readable JSON-able payload for portability requests.
UK GDPR deadlines built in
The one-month rule and the two-month complex-request extension are encoded, so due dates are right by default.
Daily overdue scan
A cron flags overdue and at-risk requests and notifies owners, so nothing slips through the cracks.
Audit-ready
Refusal reasons, redaction logs and a full status history give the ICO-defensible trail regulators expect.
Pure Community
No Enterprise dependency — it complements any GDPR privacy compliance app with the operational DSAR workflow.
Screenshots
Locate Subject Data
Data Locations
Dsar Requests
Why Choose This Module
Data protection officers, compliance teams and privacy leads at UK organisations who must respond to Subject Access Requests and other data-subject rights requests accurately and on time under UK GDPR and the Data Protection Act 2018.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: LGPL-3
- Languages: 35+
- Author: Baris Genc
- Dependencies: mail
- Support: odoo@gencbaris.com
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module