product-on-purpose data-request-router
Decide where an inbound consumer data request goes. Routing is by request type first and by the requester's state second, because two states put the same request type in different queues.
Procedure
- Read the request and name its type: access, deletion, correction, opt-out, or appeal.
- Read the requester's stated state of residence. When the request does not state one, use the billing address on the account, and record which one you used.
- Look up the queue in the routing table.
- Stamp the deadline on the ticket: 45 days from receipt of the verifiable request, with one 45-day extension available.
Routing table
| Type | Default queue | State exceptions |
|---|---|---|
| access | support | none |
| deletion | data engineering | California requests also open a vendor-deletion ticket |
| correction | support | none |
| opt-out | marketing operations | Colorado requests also check universal opt-out signal handling |
| appeal | the privacy lead | none |
Escalation
Anything that names a regulator, a lawyer, or a class action goes to the privacy lead the same day, whatever the routing table says.