Data access request form: take privacy requests in one place

A privacy request often arrives as an email to the wrong inbox, with no clue what is being asked. Then nobody knows who owns it. A request form puts the ask, the person and the likely data location in one row, so I can start.

How it works

The person gives their name and the email you hold their data under.
They pick what they want: to see, correct or delete data, or to stop marketing.
They say how they know you and where they think their data sits.
They confirm they are the person, or that they act with permission.

A sample chat

The requester's AI might ask: "What would you like us to do with your data?" Then "Which email did you use with us?" Then "Where do you think we hold it?" It shows all the answers and sends them only after a yes. Read more about agent-fillable forms.

Good to know

The form collects the request. It does not find, export or delete data, and it does not check who is asking. I verify identity myself and never ask for copies of identity documents in a form. If you search for a data deletion request form, this one covers deletion too.

This is a form, not legal advice. Deadlines and duties differ by place, so have a professional check your wording and process.

Staff who ask for tools need an access request. Visitors leave personal data too, so see a visitor registration form. Browse IT and operations forms and forms for accountants, lawyers and consultants.

Questions

Does the form delete the data?

No. It only collects the request. You find the data in your own systems, act on it and reply to the person yourself.

How do I check the requester is who they say?

Reply to the email on file and ask them to answer from that address. The form does not check identity and should not collect identity documents.

Can the requester use an AI agent?

Yes. Their AI asks for what is missing, shows the answers and sends only after the person says yes. That yes covers the confirmation box too.

Or paste the JSON

Give this to your AI. It needs the AI Form API MCP server or an API key. It makes the form and sends you the link.

text

Create this form with the AI Form API create_form tool (or POST https://aiformapi.com/v1/forms with my API key). Then reply with the public_url.

{
  "title": "Make a request about your data",
  "description": "Tell us what you would like us to do with the data we hold about you. We reply to the email you give.",
  "fields": [
    {
      "id": "requester_name",
      "label": "Your full name",
      "type": "short_text",
      "required": true,
      "max_length": 150
    },
    {
      "id": "requester_email",
      "label": "Email address we hold your data under",
      "type": "email",
      "required": true
    },
    {
      "id": "request_type",
      "label": "What would you like us to do?",
      "type": "single_choice",
      "required": true,
      "options": [
        "Show me the data you hold about me",
        "Delete my data",
        "Correct my data",
        "Stop using my data for marketing",
        "Something else"
      ]
    },
    {
      "id": "relationship",
      "label": "How are you connected to us?",
      "type": "single_choice",
      "required": true,
      "options": [
        "Customer",
        "Former customer",
        "Employee or former employee",
        "Job applicant",
        "Website visitor",
        "Newsletter subscriber",
        "Other"
      ]
    },
    {
      "id": "where_data_held",
      "label": "Where do you think we hold your data?",
      "type": "long_text",
      "help": "For example your account, your orders or our newsletter.",
      "max_length": 1000
    },
    {
      "id": "other_names_used",
      "label": "Other names or emails you have used with us",
      "type": "short_text",
      "max_length": 300
    },
    {
      "id": "request_details",
      "label": "Anything else we should know",
      "type": "long_text",
      "max_length": 1500
    },
    {
      "id": "reply_preference",
      "label": "How should we reply?",
      "type": "single_choice",
      "options": [
        "Email",
        "Phone call"
      ]
    },
    {
      "id": "acting_for_someone",
      "label": "I am making this request for someone else, with their permission",
      "type": "checkbox"
    },
    {
      "id": "confirm_person",
      "label": "I am the person this data is about, or I act for them with their permission",
      "type": "checkbox",
      "required": true
    }
  ]
}

Or call the API

bash

curl -X POST https://aiformapi.com/v1/forms \
  -H "Authorization: Bearer $AIFORMAPI_KEY" \
  -H "Content-Type: application/json" \
  -d '{"title":"Make a request about your data","description":"Tell us what you would like us to do with the data we hold about you. We reply to the email you give.","fields":[{"id":"requester_name","label":"Your full name","type":"short_text","required":true,"max_length":150},{"id":"requester_email","label":"Email address we hold your data under","type":"email","required":true},{"id":"request_type","label":"What would you like us to do?","type":"single_choice","required":true,"options":["Show me the data you hold about me","Delete my data","Correct my data","Stop using my data for marketing","Something else"]},{"id":"relationship","label":"How are you connected to us?","type":"single_choice","required":true,"options":["Customer","Former customer","Employee or former employee","Job applicant","Website visitor","Newsletter subscriber","Other"]},{"id":"where_data_held","label":"Where do you think we hold your data?","type":"long_text","help":"For example your account, your orders or our newsletter.","max_length":1000},{"id":"other_names_used","label":"Other names or emails you have used with us","type":"short_text","max_length":300},{"id":"request_details","label":"Anything else we should know","type":"long_text","max_length":1500},{"id":"reply_preference","label":"How should we reply?","type":"single_choice","options":["Email","Phone call"]},{"id":"acting_for_someone","label":"I am making this request for someone else, with their permission","type":"checkbox"},{"id":"confirm_person","label":"I am the person this data is about, or I act for them with their permission","type":"checkbox","required":true}]}'

JSON definition

json

{
  "title": "Make a request about your data",
  "description": "Tell us what you would like us to do with the data we hold about you. We reply to the email you give.",
  "fields": [
    {
      "id": "requester_name",
      "label": "Your full name",
      "type": "short_text",
      "required": true,
      "max_length": 150
    },
    {
      "id": "requester_email",
      "label": "Email address we hold your data under",
      "type": "email",
      "required": true
    },
    {
      "id": "request_type",
      "label": "What would you like us to do?",
      "type": "single_choice",
      "required": true,
      "options": [
        "Show me the data you hold about me",
        "Delete my data",
        "Correct my data",
        "Stop using my data for marketing",
        "Something else"
      ]
    },
    {
      "id": "relationship",
      "label": "How are you connected to us?",
      "type": "single_choice",
      "required": true,
      "options": [
        "Customer",
        "Former customer",
        "Employee or former employee",
        "Job applicant",
        "Website visitor",
        "Newsletter subscriber",
        "Other"
      ]
    },
    {
      "id": "where_data_held",
      "label": "Where do you think we hold your data?",
      "type": "long_text",
      "help": "For example your account, your orders or our newsletter.",
      "max_length": 1000
    },
    {
      "id": "other_names_used",
      "label": "Other names or emails you have used with us",
      "type": "short_text",
      "max_length": 300
    },
    {
      "id": "request_details",
      "label": "Anything else we should know",
      "type": "long_text",
      "max_length": 1500
    },
    {
      "id": "reply_preference",
      "label": "How should we reply?",
      "type": "single_choice",
      "options": [
        "Email",
        "Phone call"
      ]
    },
    {
      "id": "acting_for_someone",
      "label": "I am making this request for someone else, with their permission",
      "type": "checkbox"
    },
    {
      "id": "confirm_person",
      "label": "I am the person this data is about, or I act for them with their permission",
      "type": "checkbox",
      "required": true
    }
  ]
}

A data access request form for privacy requests