> ## Content Index
> Fetch the complete content index at: https://blog.jestor.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Privacy Request Management: Handling GDPR/CCPA without spreadsheets
- URL: https://blog.jestor.com/privacy-request-management-handling-gdpr-ccpa-without-spreadsheets/
- Published: 2026-01-08T20:43:09.000Z
- Updated: 2026-01-08T20:43:09.000Z
- Author: Aline Valério

Privacy laws (GDPR, CCPA) require companies to fulfill subject requests (e.g., "What data do you hold on me?"). Managing this via email is a legal risk. **Jestor** allows building a **DSAR (Data Subject Access Request)** portal to centralize and respond to these requests within the legal deadline.

### **The Privacy Flow**

1. **Request:** The user fills a form on the site asking for their data.
2. **Verification:** The DPO (Data Protection Officer) receives the task in Jestor and validates identity.
3. **Response:** The system helps compile the answer and logs that the request was fulfilled in X days.

### **Incident Registry**

If there is a leak or security breach, you must record it. Use Jestor to document the incident, measures taken, and authority notification, creating a compliance dossier.

### **Frequently Asked Questions (FAQ)**

**Does Jestor guarantee GDPR compliance?** The software helps you *manage the compliance process*. Compliance depends on your internal practices.

**Where is data hosted?** Jestor uses world-class AWS servers. Check the privacy policy for details on data location.

**Does it work for Data Mapping?** Yes. You can create a data inventory in Jestor: "Which systems use SSN?", "Who has access?", keeping the data map alive.

### **Conclusion**

With **Jestor**, you show seriousness in data protection and avoid fines due to disorganization.

Manage your privacy:[https://jestor.com/](https://jestor.com/?ref=blog.jestor.com)