The data subjects register lists the people whose personal data your organisation holds: customers, agents and staff. For each person it brings together the systems that hold them, the activities that touch their data, what they have asked of you, and the permissions they have given or taken back.
Asiri holds a name and a reference for each person. Their email address and phone number stay in the systems that are the source of truth for them.
Who can do this
An owner, editor or contributor of your workspace can add people and log requests. A viewer can read the register.
Find the register
Open Records & controls → Data subjects. Search by name or reference, or choose a group: Everyone, Open requests, Under 18, Caught in an incident or Leaving.
Asiri lists what it has been told about. If a person's data sits in a system nobody has linked to them, they will not appear here, and an export would miss it.
Add a person
Press Add a person. Give their Name, choose What they are to you, Customer, Agent or Staff, and add an External reference, such as their customer number, so you can find them again. Check your entries and create the record.
One person's record
Open a person. The tabs are:
- What you hold: the systems declared to hold them. If none is linked, Asiri cannot say where their data sits.
- Why you’re allowed: every activity that touches their data, its department, and whether you can say why you are allowed to do it. A blank in the last column is a gap, not a formatting error.
- What they’ve asked for: their requests and their permissions, given and taken back. A request cannot be answered before you have checked it is really them.
- History: what changed on their record.
If a person is under 18 and no parental consent is on record, the page warns you.
Prepare their file
If they asked for everything today, press Export their file, or Prepare the answer at the foot of their record. This opens an export for that one person.
To log something they asked for, press Log a request on the register. See the guide to answering a privacy request.
Common questions
"Is this our staff list?" No. It is the people whose personal data you hold. Staff appear here only as data subjects.
"Why is someone missing?" Nobody has linked them. Add them, or link the system that holds them.