Compliance and Habeas Data
Custodio Legal
Video tutorials in Spanish
These walkthroughs show the complete flow in the Spanish interface.
The centre where your firm answers personal-data requests from its data subjects, and reviews its consent log.
Before you start
- Only the owner of the firm opens this centre.
- Requests are filed by each data subject from Your privacy, in Settings and my account — they aren’t created here, only resolved.
Step by step
-
Open your account menu — at the foot of the sidebar — tap Support and switch to the Compliance tab.
-
On the Rights requests tab, filter by status if you need to: pending, in review, approved, or denied.
-
Pick a request to see what its subject asked for, why, and how long your firm has to answer.
-
Write a response for the subject if you want to record why you decided the way you did.
-
Choose Approve or Deny, read the dialog and confirm only when appropriate. Cancel closes the dialog without resolving the request. A confirmed decision is final and cannot be changed. Approving access records the resolution; it does not by itself demonstrate delivery of data to the subject. Approving cancellation can erase data, as the dialog warns.
-
Switch to the Consent log tab to see who granted or revoked their authorization, and under which policy version.
-
From here you can jump to the firm’s audit trail to see the full detail of every act.
How you know it worked
The request moves to “Approved” or “Denied” with your response saved, and its subject sees it resolved from their own account. Select that status filter and reopen it: the response remains after reloading and no further decision buttons appear.
If something goes wrong
| What you see | What happened | What to do |
|---|---|---|
| You don’t see the “Compliance” tab inside “Support” | You’re not the owner of the firm | Ask the owner to resolve the request |
| “There are no requests here” | Nobody has filed one yet | Once someone files one from their account, it shows up here on its own |
| You approved a cancellation by mistake | Approving it erases the subject’s data right away | There’s no way to undo it from here: always check the reason before approving |
| You want to change a decision you already made | The resolution is final | You can’t: if something needs correcting, the subject files a new request |
Depending on your country
The mechanism is the same in Colombia, Ecuador and the Dominican Republic; the legal basis and each request’s deadline change with the firm’s country — it’s explained in the personal data processing policy, which also says how to file a complaint with the authority in each country if your firm doesn’t answer. The Dominican Republic is the different case: its Ley núm. 172-13 sets deadlines — five business days for access, ten for rectification and cancellation — but created no general-purpose data protection authority, so there the complaint goes through the judicial hábeas data action. Costa Rica is the opposite case and is not offered yet: its Ley N° 8968 did create an authority, the Agencia de Protección de Datos de los Habitantes (PRODHAB), and sets a single deadline of five business days from the day after the request.