At the heart of SRR management, there are three key capabilities: * Discovery of existing information held on each individual, and continuous monitoring for changes to data stores and new systems being onboarded. * Maintaining the capacity to act on that knowledge should the data subject request modification, deletion or restriction of processing. * Tracking request workflows and holding detailed records to gauge effectiveness and demonstrate compliance. Organizations face great challenges in sifting through structured and unstructured data stores spread across repositories — whether on-premises, in the cloud or with partners and subprocessors. In addition to the discovery and retrieval requirement, organizations must also ensure that they are not violating another user’s privacy rights or exposing intellectual property when responding to SRRs. For those reasons, request fulfillment must follow a repeatable and scalable process in order to remain manageable and efficient.