Data access request form
A data access request form lets individuals formally ask your company for a copy of the personal data you hold about them. It centralizes these requests and creates a record for compliance documentation.
The form beside this text is live. Fill it in and submit it — it validates exactly as it would for a real respondent, and saves nothing.
Asking the requester's relationship surfaces privilege questions
A customer and a former employee may receive different datasets; relationship context helps your compliance team verify scope.
Preferred format ensures you deliver in a usable way
Some users want PDF, others CSV; offering the choice reduces follow-up and confusion.
No card required.
Data Access Request Form
Live previewHow to build this form
6 steps in the editor. Nothing here needs a paid plan.
- Add text fields for requester first and last name.
- Add email and phone fields.
- Add a dropdown for "How do you know our company?" or "Your relationship to us?": Customer, Former Employee, Job Applicant, Other.
- Add a textarea for "Describe the data you're requesting" (optional; requesters often don't know the precise categories).
- Add a dropdown for "Preferred format for delivery": Email, Download Link, PDF, CSV.
- Add an optional checkbox: "I understand this request will be processed within our company policy timeframe."
Fields in this form
8 fields, using 6 of the 19 field types available.
| Question | Field type | Required |
|---|---|---|
| First name | Short text | Yes |
| Last name | Short text | Yes |
| Email address | Yes | |
| Phone number (optional) | Phone | Optional |
| How do you know our company? | Dropdown | Yes |
| Describe the data you're requesting (optional) | Long text | Optional |
| Preferred format for your data | Dropdown | Yes |
| I understand this request will be processed according to applicable law and our privacy policy | Checkboxes | Yes |
What goes wrong with this form
Specific to a data access request form, not general advice about forms.
Treating this form as a compliance shortcut
This form does not automatically comply with any regulation. You remain responsible for legal review, identity verification, data collection, and timely delivery.
Asking the requester to describe their data precisely
Customers don't know your database schema. "All data you have about me" is a valid request; asking for specifics before verification delays your compliance.
Not logging submission timestamps
Regulatory responses have legal deadlines (e.g., 30 days under GDPR). Your form should auto-record submission time so you can track SLA compliance.
Questions about this form
Does this form guarantee GDPR or CCPA compliance?
No. This form only collects the request. Compliance with GDPR, CCPA, or any privacy law is your company's responsibility. You must verify identity, determine applicable law, and fulfill within required timeframes.
What if the requester doesn't provide enough info to identify their data?
Your team follows up by email. This form launches the process; you handle verification separately.
Can I ask for government ID or other proof of identity on the form?
Some regulations require identity verification, but collecting ID images through this form poses security risks. Collect the request, then verify identity via secure channels before delivery.