Consent · free template

GDPR Consent & Data Request Form

Capture marketing consent and handle data subject access requests.

A ready-to-use consent, waivers & releases form for any team that needs demonstrable permission: 21 questions, 4 pages, 3 conditional rules.

Questions
21
Pages
4
Layouts
classic
Conditional rules
3
Preview it in the gallery

Searches this template answers

Also filed under

Live preview and test console

This is the real form. Answer it to test the 1 conditional rule — nothing is sent or stored.

Page 1 of 4About you

Consent and data requests

What are you doing today?
Are you acting on behalf of someone else?

Every question on this page is currently visible.

Ready to publish
  • Payment items priced — passingEvery payment question charges a real amount, so a submission always records a payment.
  • Conditional logic resolves — passingEvery rule points at a question or page that exists in this template.
  • Legal text not required — passingThis template collects neither health nor regulated financial information.
  • Question labels unique — passingLogic and exports address questions by label, so duplicates are ambiguous.

What happens after submit: nothing is stored in this preview. On your own copy, every response triggers an instant email notification and lands in your response dashboard, ready to export or forward.

Happy with it? Take a copy into your workspace — every question, rule and setting comes with it.

Who this template is for

GDPR Consent & Data Request Form is built for any team that needs demonstrable permission who need to record who agreed to what, and when.

  • Any team that needs demonstrable permission working in consent, waivers & releases.
  • Teams who need to record who agreed to what, and when without writing code or paying for a custom build.
  • Anyone replacing consent claims you can't evidence months later with one structured record per enquiry.
  • Respondents are customers, patients and participants — the form asks them 21 questions across 4 screens.

Why this form is useful

It removes the cost of consent claims you can't evidence months later and turns each submission into a record your team can act on immediately.

  • 11 questions are required, so submissions arrive complete instead of needing a follow-up email.
  • It collects a verified email address so replies and confirmations land.
  • It captures a phone number for urgent follow-up.
  • It accepts a document or photo upload as evidence.
  • It records a signature you can keep as proof of agreement.
  • It pins the request to a specific date.
  • It captures a full postal address.
  • It allows multiple selections without free text.

How to use this template

From copy to live form is a few minutes of work, and every step is reversible.

  1. 1Press “Use this template” — a fresh copy of GDPR Consent & Data Request Form lands in your workspace, ready to edit.
  2. 2Rename or delete any question, and change what is required. Nothing here is fixed.
  3. 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
  4. 4Check the upload limits on the file question so respondents can attach what you actually need.
  5. 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
  6. 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.

Logic and conditions blueprint

Exactly how this form behaves as it is answered — 3 conditional rules ship with it.

  • Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears.
  • Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent.
  • Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent.
  • All 3 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.

About this template

Data protection work splits into two jobs: recording consent properly and responding to requests within the statutory window. This form does both. The consent section asks the individual to opt in by channel — email, text, phone and post — and by purpose, so marketing, service updates and research are agreed separately rather than bundled into one tick box. Each choice is recorded with a timestamp, which is what a regulator asks to see. The request section lets the same person exercise their rights: access to their data, rectification, erasure, restriction of processing, portability, or objection to processing, with a description of what they are asking for and the date range involved. Identity verification is handled with an upload field, and requests made on someone else's behalf require confirmation of authority. The individual chooses how they want to receive a response and confirms the statutory response period has been explained. Because everything arrives as one structured record, your data protection lead can log and evidence each case immediately.

What this form asks

Every question is editable — rename it, make it optional, or delete it entirely.

Page 1 — About you

  • Full namerequired
  • Email addressrequired
  • Contact number
  • Address
  • What are you doing today?required
  • Are you acting on behalf of someone else?required
  • Whose data is this, and what is your authority?

Page 2 — Consent preferences

  • Contact me byrequired
  • You may contact me aboutrequired
  • May we share your details with partners?required
  • How did we obtain your details?

Page 3 — Your request

  • Which right are you exercising?
  • Describe what you are requesting
  • Which data would you like erased, and why?
  • Data from (date)
  • Data to (date)
  • Preferred response formatrequired
  • Proof of identity

Page 4 — Declaration

  • Agreementrequired
  • Signaturerequired
  • Daterequired

21 questions in total.

How the form changes as it's filled in

This template ships with 3 conditional rules, grouped into 3 behaviours driven by 3 questions. Everything below is already set up — edit or delete any rule once the template is in your workspace.

Driven by “What are you doing today?

  • Reveals questions

    If “What are you doing today?” is Making a data request, the form reveals “Which right are you exercising?”.

Driven by “Are you acting on behalf of someone else?

  • Makes answers required

    If “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes required before the form can be submitted.

Driven by “Which right are you exercising?

  • Makes answers required

    If “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes required before the form can be submitted.

Works in this layout

These pages cover the same subject ground as the gdpr consent & data request form, matched on the words people actually search for.

Privacy & compliance

This form collects identity or financial details. Enable encrypted answers on the sensitive fields, avoid emailing full values in notifications, and delete responses once the check is complete.

Frequently asked questions

Does this replace a privacy policy?

No — it records consent and requests. Link your privacy notice from the form so people can read how their data is used.

Is the consent record defensible?

Each submission stores the exact options chosen with a timestamp, which is what evidencing consent requires.

How do we meet the response deadline?

Route request submissions to your data protection lead immediately and use the submission date as the clock start.

Can we use it for erasure requests?

Yes — selecting erasure reveals a required question about which data is involved so the request is actionable.

Is the GDPR Consent & Data Request Form template free to use?

Yes. You can preview and test GDPR Consent & Data Request Form on this page without an account, and take a copy into your own HelloForms workspace on the free plan. There is nothing to install and no card required to publish it.

What does the GDPR Consent & Data Request Form template ask for?

It asks 21 questions across 4 pages, 11 of which are required. Every question is listed in full further down this page, and each one can be renamed, reordered, made optional or deleted after you copy the template.

Can I edit the GDPR Consent & Data Request Form form after copying it?

Yes — the copy is entirely yours. Change wording, add or remove questions, switch between the classic layout, restyle it to match your brand, and set who gets notified on each submission.

How does the conditional logic in this consent, waivers & releases form work?

3 conditional rules ship with the template: Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears. Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent. Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent. All rules are editable in the Logic tab.

Where do responses to the GDPR Consent & Data Request Form form go?

Submissions land in your workspace under Submissions, where you can search, filter, label and export them to CSV or PDF. You can also email a notification to your team on every submission and send the respondent an auto-reply.

Can I embed the GDPR Consent & Data Request Form form on my own website?

Yes. Publish the form and paste the embed snippet into any page or share the direct link. The embedded form resizes to fit its container and loads no advertising or marketing trackers inside the iframe.

Can respondents upload files?

Yes. This template includes a file upload question, so respondents can attach documents or photos with their answers. You can adjust the accepted file types and size limits on that question.

Is the signature on this form legally usable?

The template captures a drawn signature and stores it with the submission, along with the timestamp, so you keep evidence of who agreed and when. Whether that is sufficient depends on your jurisdiction and the agreement itself.

More forms teams pair with the gdpr consent & data request form.

Related categories