Operational ARCOPB: SLA, evidence and Agency response
Playbook to answer ARCOPB requests (6 rights) within a maximum of 30 business days with auditable evidence.
1. Statutory duty to respond and legal deadlines
Chile Law 21.719 sets a strict 30 business day deadline to resolve data subject requests. Failure to respond or late responses represent punishable offenses directly sanctionable by the Data Protection Agency.
2. The six ARCOPB rights in production data stores
The legal regime covers six explicit rights: Access to stored data and sources; Rectification of inaccurate records; Cancellation (permanent erasure); Opposition to specific processing flows; Portability in structured machine-readable formats; and Blocking during disputes.
3. Technical orchestration across data pipelines and backups
An erasure or blocking request cannot remain a flag in an OLTP table. It must propagate downstream across analytical data lakes, read replicas, cold backups, and sub-processor SaaS integrations with auditable purge workflows.
4. Tamper-evident audit trails and regulatory defense
Every ARCOPB submission must create an immutable digital log capturing timestamps, identity verification, technical execution receipts, and delivery confirmations to the requester as formal evidence for Agency compliance.