Skip to content
Last updated: 2026-04-06
Guide

Rights Portal

The Transparency Center provides a self-service portal where data subjects can view privacy information, submit rights requests, and manage consent preferences.

Overview

The Transparency Center is an embeddable web component that enables data subjects to:

  • View privacy notices and policies
  • Submit data subject rights requests (access, deletion, rectification)
  • Manage consent preferences
  • Access FAQ information

Widget Integration

Embedding the Transparency Center

Add the Transparency Center to your website:

HTML
<script src="https://transparencycenter.dxtra.ai/assets/index.js" type="module"></script>

<transparency-app data-controller-id="YOUR_DATA_CONTROLLER_ID"></transparency-app>

Replace YOUR_DATA_CONTROLLER_ID with your organization's Data Controller ID, found in the Developers section of the dashboard.

For detailed embedding instructions, see Widget Embedding.

Rights Request Types

The portal supports GDPR and CCPA rights requests:

GDPR Rights

Right Description
Right of Access Request copy of personal data
Right to Rectification Correct inaccurate data
Right to Erasure Request data deletion
Right to Restrict Processing Limit data processing
Right to Data Portability Receive data in portable format
Right to Object Object to processing

CCPA Rights

Right Description
Right to Know Information about data collection
Right to Delete Request data deletion
Right to Opt-Out Opt out of data sale

Request Submission Flow

sequenceDiagram
    participant DS as Data Subject
    participant TC as Transparency Center
    participant API as Dxtra Platform

    DS->>TC: Submit rights request
    TC->>API: Create rights request
    API-->>TC: Confirmation
    TC-->>DS: Request submitted
    Note over API: Privacy team notified

How It Works

  1. Data subject submits a request through the Transparency Center
  2. Dashboard notification is sent to your privacy team
  3. Your team reviews and verifies the request
  4. Request is fulfilled and the data subject is notified

Identity Verification

Before processing requests, verify the data subject's identity:

  • Email verification link
  • Account login confirmation
  • Document verification for high-risk requests

Response Timelines

Regulation Response Deadline
GDPR 30 days (extendable to 90)
CCPA 45 days (extendable to 90)

Dashboard Processing

The Rights Management section in the dashboard displays:

  • Request type and submission date
  • Data subject identifier (DID)
  • Verification status
  • Completion status

Processing Workflow

  1. View pending requests in the dashboard
  2. Verify data subject identity
  3. Update request status
  4. Document fulfillment actions
  5. Mark request as complete