# Transparent Communication Workflows

## Workflow 1: Privacy Notice Design (Layered Approach)

```
[Privacy Notice Required]
         │
         ▼
[Layer 1: Short Notice]
   - Controller identity
   - Core purposes
   - Key rights summary
   - Most impactful processing
   - Link to full notice
   - 150-300 words, no scroll needed
         │
         ▼
[Layer 2: Full Privacy Notice]
   - All Art. 13/14 required elements
   - Structured with headings
   - Table of contents
   - Plain language throughout
   - Expandable sections
         │
         ▼
[Layer 3: Supplementary Detail]
   - LIA documents (on request)
   - Transfer mechanism details
   - Retention schedule
   - ADM logic explanations
         │
         ▼
[Readability Review]
   - Flesch-Kincaid Grade Level ≤ 8
   - No unexplained jargon
   - No double negatives
   - Clear sentence structure
         │
         ▼
[DPO Approval + Publish]
```

## Workflow 2: Data Subject Request Response Timeline

```
[Request Received: Day 0]
         │
         ▼
[Day 1-3: Acknowledge]
   - Assign reference number
   - Send acknowledgement
   - Begin identity verification if needed
         │
         ▼
[Day 3-15: Process Request]
   - Verify identity (if needed)
   - Collect data / assess request
   - Apply exemptions (if any)
         │
         ▼
[Day 15-25: QA and Review]
   - Quality assurance review
   - DPO sign-off
   - Prepare response
         │
         ▼
[Day 25-30: Deliver Response]
   ├── Standard response ──► Deliver by Day 30
   │
   └── Extension needed?
         ├── Yes ──► Notify subject by Day 30
         │            State reasons
         │            Give new deadline (Day 30-90)
         │            Continue processing
         │            Deliver by extended deadline
         │
         └── Refusal?
               └── Notify by Day 30
                   - Reasons for refusal
                   - Right to complain (ICO)
                   - Right to judicial remedy
```

## Workflow 3: Fee or Refusal Assessment

```
[Data Subject Request Received]
         │
         ▼
[Manifestly Unfounded?]
   ├── Disruptive intent stated ──► Document evidence
   ├── No legitimate purpose ──► Document reasoning
   └── Appears genuine ──► Process normally (no fee)
         │
         ▼
[Excessive Due to Repetition?]
   ├── Count identical requests in past 12 months
   │     ├── 1-3 identical requests ──► Process normally
   │     └── 4+ identical requests with no change ──► Excessive
   │
   └── Not repetitive ──► Process normally
         │
         ▼
[Manifestly Unfounded or Excessive?]
   ├── Yes ──► Choose: Fee or Refuse
   │     │
   │     ├── Fee ──► Calculate (GBP 10 + GBP 0.10/page >500)
   │     │            Notify subject of fee and basis
   │     │            Process upon payment
   │     │
   │     └── Refuse ──► Notify within 30 days
   │                     Include: reasons, right to complain, judicial remedy
   │
   └── No ──► Process free of charge
```