GDPR Consent & Data Request Form — shared by the community
Rachel O. shared this 21-question build with 3 conditional rules already wired up. Test it below, then take a copy.
A ready-to-use consent, waivers & releases form for any team that needs demonstrable permission: 21 questions, 4 pages, 3 conditional rules.
- Shared by
- Rachel O. · Events coordinator
- Questions
- 21
- Replies
- 23
- Copies taken
- 604
gdpr consent form, data request form, privacy consent form, subject access request form, marketing consent form, free gdpr form template, gdpr consent & data request form, gdpr consent & data request, gdpr consent & data request forms, gdpr consent & data request template, online gdpr consent & data request, gdpr consent data request form, gdpr, gdprs, consent, consents, data, datas, request, requests, capture, marketing, handle, subject, access, consent form, waiver form, release form, liability waiver, photo release form, permission form, authorization form, parental consent form, legal release form, gdpr consent & data request form example, shared gdpr consent & data request form
Live preview and test console
This is the real form. Answer it to test the 1 conditional rule — nothing is sent or stored.
Page 1 of 4 — About you
Every question on this page is currently visible.
Works for you? Take Rachel O.'s copy into your own workspace — questions, rules and settings included.
Who this template is for
GDPR Consent & Data Request Form is built for any team that needs demonstrable permission who need to record who agreed to what, and when.
- Any team that needs demonstrable permission working in consent, waivers & releases.
- Teams who need to record who agreed to what, and when without writing code or paying for a custom build.
- Anyone replacing consent claims you can't evidence months later with one structured record per enquiry.
- Respondents are customers, patients and participants — the form asks them 21 questions across 4 screens.
Why this form is useful
It removes the cost of consent claims you can't evidence months later and turns each submission into a record your team can act on immediately.
- 11 questions are required, so submissions arrive complete instead of needing a follow-up email.
- It collects a verified email address so replies and confirmations land.
- It captures a phone number for urgent follow-up.
- It accepts a document or photo upload as evidence.
- It records a signature you can keep as proof of agreement.
- It pins the request to a specific date.
- It captures a full postal address.
- It allows multiple selections without free text.
How to use this template
From copy to live form is a few minutes of work, and every step is reversible.
- 1Press “Use this template” — a fresh copy of GDPR Consent & Data Request Form lands in your workspace, ready to edit.
- 2Rename or delete any question, and change what is required. Nothing here is fixed.
- 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
- 4Check the upload limits on the file question so respondents can attach what you actually need.
- 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
- 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.
Logic and conditions blueprint
Exactly how this form behaves as it is answered — 3 conditional rules ship with it.
- Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears.
- Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent.
- Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent.
- All 3 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.
What this form asks
Page 1 — About you
- Full namerequired
- Email addressrequired
- Contact number
- Address
- What are you doing today?required
- Are you acting on behalf of someone else?required
- Whose data is this, and what is your authority?
Page 2 — Consent preferences
- Contact me byrequired
- You may contact me aboutrequired
- May we share your details with partners?required
- How did we obtain your details?
Page 3 — Your request
- Which right are you exercising?
- Describe what you are requesting
- Which data would you like erased, and why?
- Data from (date)
- Data to (date)
- Preferred response formatrequired
- Proof of identity
Page 4 — Declaration
- Agreementrequired
- Signaturerequired
- Daterequired
Conditional logic in this build
- When “What are you doing today?” is Making a data request, show “Which right are you exercising?”.
- When “Are you acting on behalf of someone else?” is Yes, require “Whose data is this, and what is your authority?”.
- When “Which right are you exercising?” is Erasure, require “Which data would you like erased, and why?”.
Questions about this shared form
Does this replace a privacy policy?
No — it records consent and requests. Link your privacy notice from the form so people can read how their data is used.
Is the consent record defensible?
Each submission stores the exact options chosen with a timestamp, which is what evidencing consent requires.
How do we meet the response deadline?
Route request submissions to your data protection lead immediately and use the submission date as the clock start.
Can we use it for erasure requests?
Yes — selecting erasure reveals a required question about which data is involved so the request is actionable.
Is the GDPR Consent & Data Request Form template free to use?
Yes. You can preview and test GDPR Consent & Data Request Form on this page without an account, and take a copy into your own HelloForms workspace on the free plan. There is nothing to install and no card required to publish it.
What does the GDPR Consent & Data Request Form template ask for?
It asks 21 questions across 4 pages, 11 of which are required. Every question is listed in full further down this page, and each one can be renamed, reordered, made optional or deleted after you copy the template.
Can I edit the GDPR Consent & Data Request Form form after copying it?
Yes — the copy is entirely yours. Change wording, add or remove questions, switch between the classic layout, restyle it to match your brand, and set who gets notified on each submission.
How does the conditional logic in this consent, waivers & releases form work?
3 conditional rules ship with the template: Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears. Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent. Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent. All rules are editable in the Logic tab.
Where do responses to the GDPR Consent & Data Request Form form go?
Submissions land in your workspace under Submissions, where you can search, filter, label and export them to CSV or PDF. You can also email a notification to your team on every submission and send the respondent an auto-reply.
Can I embed the GDPR Consent & Data Request Form form on my own website?
Yes. Publish the form and paste the embed snippet into any page or share the direct link. The embedded form resizes to fit its container and loads no advertising or marketing trackers inside the iframe.
Can respondents upload files?
Yes. This template includes a file upload question, so respondents can attach documents or photos with their answers. You can adjust the accepted file types and size limits on that question.
Is the signature on this form legally usable?
The template captures a drawn signature and stores it with the submission, along with the timestamp, so you keep evidence of who agreed and when. Whether that is sufficient depends on your jurisdiction and the agreement itself.
More from the community
Photo & Video Release Form
Get written permission to use someone's image, with scope and duration.
General Liability Waiver Form
Record assumption of risk and a signed waiver for any activity.
Model Release Form
License a model's likeness with usage rights, credit and payment terms.
Parental Consent Form
General-purpose guardian consent with activity, medical and contact detail.
Quick Marketing Consent
A clean, dated opt-in record with per-channel permissions.
Photo & Media Release Form
Get written permission to use someone's photo, video or audio, with the usage, duration and territory agreed.

