Who this covers
The people on Who notifies: notifiers, deciders, deputies and technical contacts, usually your employees, sometimes an outside adviser. Owners named on products, risks and policies, approvers of policy versions and whoever recorded a notification are your accountability record and are not covered here.
1 · Subject access — export everything held
2 · Erasure — remove a person
Their name, email, phone and notes on the rota are replaced with [removed], and their address is taken out of the alert log (the others an alert went to stay). The role slot stays on Who notifies, so the rota shows a gap to fill rather than losing it.
Cyresora refuses while they are on the alert rota for an open incident: a running statutory deadline must keep its notifier. Put someone else on the rota first.
Kept: the audit trail's lines that this person was added to or removed from the rota, which carry their name, because the audit trail cannot be edited.