{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DSAR Response (Art. 15 GDPR)","description":"Response letter sent to a data subject exercising the right of access. Must be supplied without undue delay and in any case within one month of receipt (Art. 12(3)), extensible by two further months where necessary.","type":"object","required":["controller","request","data_subject","response","activities"],"additionalProperties":false,"properties":{"reference":{"type":"string"},"response_date":{"type":"string","format":"date"},"controller":{"type":"object","required":["name","contact_email"],"additionalProperties":false,"properties":{"name":{"type":"string"},"address":{"type":"string"},"contact_email":{"type":"string","format":"email"},"dpo_email":{"type":"string","format":"email"}}},"request":{"type":"object","required":["received_on","channel"],"additionalProperties":false,"properties":{"received_on":{"type":"string","format":"date"},"channel":{"type":"string"},"scope_requested":{"type":"string"},"identity_verified_on":{"type":"string","format":"date"},"identity_verification_method":{"type":"string"}}},"data_subject":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string"},"address":{"type":"string"},"email":{"type":"string","format":"email"},"reference":{"type":"string"}}},"response":{"type":"object","required":["decision"],"additionalProperties":false,"properties":{"decision":{"type":"string","enum":["fulfilled","partial","refused","extension_granted"]},"extension_new_deadline":{"type":"string","format":"date"},"refusal_reason":{"type":"string"},"partial_scope_reason":{"type":"string"},"delivery_method":{"type":"string"}}},"activities":{"type":"array","description":"Per Art. 15(1)(a)-(h), the controller must confirm processing and supply the specified information for each activity.","items":{"type":"object","required":["purpose"],"additionalProperties":false,"properties":{"purpose":{"type":"string"},"data_categories":{"type":"array","items":{"type":"string"}},"recipients":{"type":"array","items":{"type":"string"}},"retention":{"type":"string"},"source":{"type":"string"},"international_transfers":{"type":"string"}}}},"data_summary":{"type":"string","description":"Short narrative of the actual data held (the detailed export is typically attached as a separate file)."},"attachments":{"type":"array","items":{"type":"string"},"description":"Filenames of attached data export files."},"signatory":{"type":"object","additionalProperties":false,"properties":{"name":{"type":"string"},"title":{"type":"string"}}}}}