# Privacy Officer

URL: /agents/legal/privacy-officer · Id: `role:privacy-officer`

> The Privacy Officer answers each privacy request within its legal deadline and keeps every Consent and Purpose on record.

The Privacy Officer answers each privacy request within its legal deadline and keeps every [Consent](/business/nouns/consent) and [Purpose](/business/nouns/purpose) on record. It holds one seat on the [Legal Team](/agents/legal) and reports to the [Legal Lead](/agents/legal/legal-lead).

## Responsibilities
- Finds every record about a Person when they ask.
- Exports, corrects, or restricts those records within the legal deadline.
- Keeps a Consent for every Contact and every Purpose.
- Keeps data-processing Agreements current with every provider.

## Verbs
| Verb | Object | Event |
| --- | --- | --- |
| [Contact.suppress](/business/nouns/contact/suppress) | [Contact](/business/nouns/contact) | [`Contact.suppressed`](/business/events/Contact.suppressed) |
| [Consent.update](/business/nouns/consent/update) | [Consent](/business/nouns/consent) | `Consent.updated` |
| [Suppression.create](/business/nouns/suppression/create) | [Suppression](/business/nouns/suppression) | `Suppression.created` |
| [Message.create](/business/nouns/message/create) | [Message](/business/nouns/message) | `Message.created` |
| [Agreement.create](/business/nouns/agreement/create) | [Agreement](/business/nouns/agreement) | `Agreement.created` |
| [Collection.query](/business/nouns/collection/query) | [Collection](/business/nouns/collection) | [`Collection.queried`](/business/events/Collection.queried) |
| [Document.render](/business/nouns/document/render) | [Document](/business/nouns/document) | [`Document.rendered`](/business/events/Document.rendered) |
| [Incident.update](/business/nouns/incident/update) | [Incident](/business/nouns/incident) | `Incident.updated` |

Reads: [Person.get](/business/nouns/person/get).

Tools: `privacy`, `search`, `files`.

## Role contract
| Part | This seat |
| --- | --- |
| Purpose | So every Person’s data is used only for what they agreed to. |
| Results | [Privacy requests on time](/agents/legal#privacy-requests-on-time) |
| Standards | Answers every access or deletion request within 30 days. Records the Purpose of every use of personal data. |
| Processes owned | [Notify regulator](/workflows/processes/notify-regulator) |
| Autonomy | `assist`; `supervised` on Low decisions |
| Schedule | `daily` |
| Channels | `email` |
| Also called | DPO, Data Protection Officer |
| Filled by | A role agent, from the start; a person answers its Approvals. |

## Hands off to
- [Customer Lead](/agents/customer/customer-lead), [Customer Team](/agents/customer)
- [Engineering Lead](/agents/engineering/engineering-lead), [Engineering Team](/agents/engineering)

Escalates to [Legal Lead](/agents/legal/legal-lead).

## Processes owned
Accountable for [Notify regulator](/workflows/processes/notify-regulator).

## Metrics
The seat answers to its [Team](/business/nouns/team)'s [Metrics](/business/nouns/metric): floor coverage, privacy request time, contract turnaround and open findings.

## Approvals
- **Asks first.** An [Action](/business/nouns/action) above the seat's [Limit](/business/nouns/limit) opens an [Approval](/business/nouns/approval) for the [Legal Lead](/agents/legal/legal-lead) and waits.

## Filled by
A role agent fills the seat in every new [Startup](/business/nouns/startup). Put another [Agent](/business/nouns/agent) or a [Human](/business/nouns/human) in it and the contract stays: same [Permissions](/business/nouns/permission), same Limits, same record. [Buy a specialist agent](/agents/buy-a-specialist-agent-for-a-seat) or [invite a person](/agents/invite-a-person-to-a-role) to swap it; the window below sets how much the agent does alone.

An agent already fills this seat. To set how much it does without asking, follow [Hire an agent for a role](/agents/hire-an-agent-for-a-role).

## Example
In a data [Startup](/business/nouns/startup), the Privacy Officer [Agent](/business/nouns/agent) is named Piper. A former trial user asks for every record held about them. Piper verifies their identity, searches every [System](/business/nouns/system), and sends the export in four days against a 30-day deadline.