DSAR request forms · GDPR Compliance Hub

Use this page to record requests from the public (data subjects) or entered by your staff on behalf of a customer, vendor, or other third party. Submitting creates a DSAR in your register using the same pipeline as the public portal.

Request context

Choose whether the data subject submitted this themselves, or your staff recorded it on behalf of an external party (customer, vendor, third party).

Data subject (self-service) The individual is exercising their rights directly (web, email, phone, etc.). Staff-recorded Recorded by staff on behalf of a customer, vendor, or third party (e.g. phone, in-person, or internal intake) — not on behalf of another employee acting as an employee.

Data subject's relationship to organisation

Data subject

These fields apply to every request type below.

Full name *

Email *

Previous email

Right of access — confirm what personal data you hold and how it is processed.

ID document type

ID number / reference

Information requested

Specific time period (optional)

We will respond within the statutory timeframe. Identification may be required to verify identity.

Right to rectification — correct inaccurate or incomplete data.

Incorrect data *

Corrected information *

Supporting evidence

We will correct inaccurate or incomplete data without undue delay where possible.

Right to erasure — request deletion where applicable.

Grounds for erasure *

Specific data to erase

Erasure may not apply where retention is required by law (e.g. tax, employment).

Right to data portability — receive or transfer data you provided, where processing is automated and based on consent or contract.

Preferred format *

Recipient (if transferring)

Data to include

Applies to data provided by the data subject and processed by automated means under consent or contract.

GDPR Compliance Hub — adapt field wording to your organisation's policy.