Abstract: Techniques for managing personally identifiable information are discussed herein. Such personally identifiable information may be managed in a data subject rights management platform that may centrally manage policies by determining actions associated with data in response to various requests. The technique identifies what fields and tables are applicable to the request by generating and accessing a catalog of applications that includes a mapping of what data is stored in each application and how the data is processed. As policies are centrally managed, applications can be dynamically updated so that if policies change, code associated with each application does not need to be updated individually.