Compliance

Advance a GDPR data-subject request through its lifecycle.

SEC-1: the DSR flow was intake-only — requests sat pending forever with no way to fulfill them, while the compliance status implied a working workflow. A data-protection officer (compliance:write) now moves each request through pending → in_progress → completed/rejected; terminal states stamp completed_at, giving an auditable fulfillment record within the GDPR Art. 12(3) one-month window. Tenant-scoped.

post/v1/compliance/gdpr/requests/{id}/status

Request

  • Base URL: https://api.scalix.world
  • URL: https://api.scalix.world/v1/compliance/gdpr/requests/{id}/status
  • Auth: HTTP bearer

Path parameters

idstring required

Data-subject request id (UUID)

Request body

status'pending' | 'in_progress' | 'completed' | 'rejected' required

Response

Updated data-subject request

idstring uuid required
tenant_idstring required
subject_emailstring required
request_type'export' | 'erasure' | 'rectification' | 'access' required
status'pending' | 'in_progress' | 'completed' | 'rejected' required
notesstring nullable
created_atstring date-time required
completed_atstring date-time nullable

Changes

No recorded changes to this operation across all 1 revision of this API.