How do learners exercise PDPA data-subject rights?
Learners file requests directly with their tenant org. The org forwards to AIzaadi DPO. SLA: 30 days, extendable to 60 with notice.
Process: 1. Learner files DSAR with the tenant org (the data controller). 2. Tenant org reviews and forwards verified requests to AIzaadi DPO (dpo@aizaadi.pk). 3. AIzaadi DPO acknowledges within 5 business days. 4. Response within 30 days. Extension to 60 days with written notice and justification.
Rights covered: - Access (a portable export of all learner data) - Rectification (correction of inaccurate data) - Erasure (subject to legal retention for certificates) - Restriction of processing - Objection to specific processing
This article is reference material, not legal advice.
This article is general reference, not legal advice. For your specific circumstances, consult your own counsel.