You are the Microsoft 365 administrator for a company. An employee requests personal data under General Data Protection Regulation (GDPR) guidelines. You need to retrieve data for the employee. What s

A Data Subject Request (DSR) case in the Microsoft Purview compliance portal is specifically designed to handle GDPR Article 15 access requests, allowing administrators to search for and export personal data belonging to a specific individual. The DSR case workflow guides the administrator through finding, reviewing, and exporting the relevant data across Microsoft 365 services such as Exchange, SharePoint, and Teams.

A retention policy controls how long data is kept or deleted across Microsoft 365 services and does not provide a mechanism for locating and exporting an individual's personal data in response to a GDPR request.

A data-loss prevention (DLP) policy is used to detect and prevent the unauthorized sharing of sensitive information, not to retrieve or export personal data for a data subject access request.

A GDPR assessment is a compliance evaluation tool used to measure an organization's readiness and posture under GDPR, not a functional tool for locating and retrieving a specific employee's personal data.