Edit

Share via


Respond to personal data discovery requests (Microsoft Entra ID)

The first step in responding to personal data requests is to find personal data that's subject to the request. This step helps you to determine whether a request meets your organization's requirements for honoring or declining the request.

Step 1: Find personal data for the user in Power Automate

The following table summarizes the Power Automate resources that may contain the personal data of a user who authenticates using Microsoft Entra ID.

Resource Purpose
System-generated logs Records that capture system events and history.
Run history The history of each flow execution for the past 28 days, including the start time, end time, status, and all inputs and outputs. Learn more.
Activity feed Recaps flow activities, including run status, failures, and notifications.
User jobs Not visible to the user; system jobs that run on behalf of a user for flows to execute.
Cloud flows The workflow logic that exists for a cloud flow. Learn more.
Desktop flows The workflow logic for a desktop flow. Learn more.
Flow permissions Permissions that allow other users to share a flow. Learn more.
User details Not visible to the user; details that support flow execution.
Connections Used by connectors to share data with APIs, systems, databases, etc. Learn more.
Connection permissions Permissions for connections. Learn more.
Custom connectors Custom connectors that a user has created and published that allow connections to custom or third-party systems. Learn more
Custom connector permissions Permissions for custom connectors. Learn more.
Machine and machine groups Machines registered with Power Automate for Desktop. Learn more.
Hosted machines Windows 365 machines created in Power Automate. Learn more.
Gateway Gateways are on-premises data services that users can install to transfer data quickly and securely between Power Automate and a data source that isn't in the cloud. Learn more.
Gateway permissions Permissions for gateways. Learn more.
Process mining processes Processes analyzed with the Process Mining capability in Power Automate. Learn more.

Step 2: Find personal data for the user in other Power Platform services

Personal data subject to the request might be present in Power Platform services if the user has interacted with other Power Platform features. For guidance on how to discover personal data stored in the Power Apps service, Microsoft Copilot Studio service or Dataverse, go to About privacy.

Step 3: Find personal data for the user in the Microsoft 365 admin center

Some feedback mechanisms in Power Automate are integrated with the Microsoft 365 admin center.

For guidance on how to discover feedback data stored by the Microsoft 365 admin center, go to How can I see my user's feedback?.