> ## Documentation Index
> Fetch the complete documentation index at: https://docs.planeconnection.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Privacy and Data Compliance

> Handle data deletion requests, configure retention policies, manage privacy requests, review consent records, and maintain compliance audit trails.

<Warning>
  This feature requires **administrator** or **workspace owner** permissions. Changes made here
  affect all users in your workspace.
</Warning>

By the end of this guide, you will have handled data deletion requests, configured retention policies, and reviewed your workspace's privacy compliance records.

This guide helps you handle data deletion requests, configure retention policies, process privacy requests, and maintain compliance audit trails.

<Info>
  **Who should read this:** Workspace administrators and designated privacy officers. Privacy
  management requires the **Admin** or **System Administrator** role. If your organization has a
  Data Protection Officer (DPO), grant them Admin access to the privacy settings.
</Info>

## Handle data deletion requests

<Steps>
  ### Step 1: Navigate to Privacy Settings

  In the **Settings** section, select **Privacy & Compliance** and open the **Deletion Requests** tab.

  ### Step 2: Create a new deletion request

  Click **New Deletion Request**. Enter the requestor's identifying information and select the applicable regulation (GDPR, CCPA, or Internal policy).

  ### Step 3: Review the data scope

  The system displays all records associated with the individual across modules.

  <Warning>
    Aviation safety records may be subject to retention requirements under 14 CFR Part 5.95-5.97 and
    49 CFR Part 830 (NTSB reporting). Review regulatory obligations before deleting safety-related
    data. The system flags records that fall under regulatory retention holds.
  </Warning>

  ### Step 4: Approve or deny the request

  Select **Approve**, **Partially approve**, or **Deny**. If you deny, document the reason.

  ### Step 5: Execute the deletion

  For approved requests, click **Execute Deletion**. The system removes the selected data and generates a deletion certificate.

  ### Step 6: Confirm completion

  Download the deletion certificate and provide it to the requestor.
</Steps>

<Tip>
  Set up a recurring calendar reminder to review the Deletion Requests dashboard weekly. The system
  highlights requests approaching their regulatory deadline with a countdown indicator.
</Tip>

## Configure data retention policies

Retention policies define how long different categories of data are
stored before automatic archival or deletion.

<Steps>
  ### Step 1: Navigate to Retention Settings

  In **Settings > Privacy & Compliance**, select the **Retention Policies** tab.

  ### Step 2: Review and customize retention periods

  If you want to adjust a retention period, click **Edit** on the category. You can extend retention beyond the default but cannot reduce it below the regulatory minimum.

  ### Step 3: Save retention configuration

  Click **Save Retention Policies**. Changes apply prospectively.
</Steps>

<Note>
  Retention policies interact with deletion requests. If a data subject requests deletion of records
  that are still within a regulatory retention hold, the system retains those records and documents
  the exemption in the deletion certificate.
</Note>

## Manage privacy requests

Beyond deletion requests, data subjects may submit access requests
(right to access their data) or rectification requests (right to
correct inaccurate data).

<Steps>
  ### Step 1: View all privacy requests

  Navigate to **Settings > Privacy & Compliance > All Requests**.

  ### Step 2: Process the request

  For access requests, click **Generate Data Package**, review for redactions, and click **Release Data Package**. For rectification requests, verify the requestor's identity, update the records, and confirm the changes.
</Steps>

## Review consent records

PlaneConnection tracks consent for data processing across several
touchpoints -- account creation, safety report submission, newsletter
opt-in, and third-party integrations.

<Steps>
  ### Step 1: Navigate to Consent Records

  In **Settings > Privacy & Compliance**, select the **Consent Log** tab.

  ### Step 2: Filter and review

  Use the filters to search by user, consent type, date range, or status.

  ### Step 3: Export (optional)

  If you want to download the consent log for compliance audits, click **Export**.
</Steps>

## Export user data

If you need to fulfill a data portability request, navigate to **Settings > Privacy & Compliance > Data Export**, enter the user's email, select data categories and format, and click **Generate Export**.

<Warning>
  User data exports may contain Sensitive Security Information (SSI) as defined by 49 CFR Part 1520.
  Do not transmit SSI via unencrypted email.
</Warning>

## Monitor compliance with the audit trail

If you want to review all privacy-related actions, navigate to **Settings > Privacy & Compliance > Audit Trail**. Export the audit trail before regulatory audits to demonstrate your compliance program.

## Related

<CardGroup cols={2}>
  <Card title="Export Data" href="/how-to/admin/export-data">
    Full workspace data exports for backup and compliance.
  </Card>

  <Card title="Data Privacy and Compliance" href="/explanation/data-privacy">
    Conceptual overview of the platform's privacy architecture.
  </Card>

  <Card title="Manage Users" href="/how-to/admin/manage-users">
    User account lifecycle and role management.
  </Card>

  <Card title="Permissions Matrix" href="/reference/permissions">
    Role-based access controls for privacy features.
  </Card>
</CardGroup>