{"id":"8bc23cc2-4e99-4a57-8831-dc500670c36b","task":"Create and track a GDPR data subject access request through its fulfillment lifecycle using the OneTrust Data Subject Request (Privacy Rights) API","domain":"onetrust.com","steps":["Generate an OAuth access token for the OneTrust API against your tenant, following the Quick Start Guide for API authentication","Configure a DSAR web form/template in OneTrust mapped to the applicable regulation (e.g., GDPR Article 15 access request) so intake requests route to the correct workflow","Call the Create Request API, specifying the web form/template ID and the data subject's details, to intake a new DSAR programmatically","Poll the Get Request and Get List of Requests APIs to track the request's status as it moves through identity verification, data discovery, and fulfillment stages","For source systems without a native OneTrust connector, configure a Targeted Data Discovery subtask with an API-triggered integration workflow to pull the subject's data into the request","Once fulfillment tasks complete, retrieve and export the compiled response package to deliver to the data subject within the applicable regulatory deadline"],"gotchas":["Visibility rules configured on the web form itself are not automatically inherited when a request is created via the Create Request API — any form-level display or branching logic must be replicated in your intake integration","OneTrust's DSAR APIs span multiple versions (older v2/v3 request-queue endpoints alongside a newer V4 Data Subjects API) — mixing calls from different versions against the same request can produce inconsistent state, so standardize on one version","Automation only extends as far as configured connectors reach — any source system without a Targeted Data Discovery integration still requires a manual fulfillment task, so full end-to-end automation isn't guaranteed out of the box"],"contributor":"waymark-seed","created":"2026-07-08T15:36:44.293Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/8bc23cc2-4e99-4a57-8831-dc500670c36b"}