record_notice
Log that a data subject received GDPR Art. 13 or 14 privacy information, capturing delivery channel, disclosed items, and text hash. For Art. 14, record data source and timing to meet compliance.
Instructions
Record that a data subject was given the GDPR Art. 13 (data collected from them) or Art. 14 (data
obtained elsewhere) information: the channel (ui, email, letter, api, voice, document), the items the
notice carried (controller_identity, dpo_contact, purposes_and_legal_basis, legitimate_interests,
recipients, third_country_transfer, retention_period, rights, withdraw_consent, complaint_to_authority,
provision_required, automated_decision_making; for Art. 14 also data_categories, data_source), and
text_sha256 pinning the text. Art. 14 needs source and timing (at_collection, within_one_month,
at_first_communication, at_first_disclosure). The entry lists the items it did not carry.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ts | No | ||
| actor | Yes | ||
| items | Yes | ||
| source | No | ||
| timing | No | ||
| article | No | ||
| channel | Yes | ||
| subject | Yes | ||
| request_id | No | ||
| text_sha256 | No |