GDPR Consent & Data Request Form
Capture marketing consent and handle data subject access requests.
A ready-to-use consent, waivers & releases form for any team that needs demonstrable permission: 21 questions, 4 pages, 3 conditional rules.
- Questions
- 21
- Pages
- 4
- Layouts
- classic
- Conditional rules
- 3
Searches this template answers
- gdpr consent form
- data request form
- privacy consent form
- subject access request form
- marketing consent form
- free gdpr form template
Also filed under
Live preview and test console
This is the real form. Answer it to test the 1 conditional rule — nothing is sent or stored.
Page 1 of 4 — About you
Every question on this page is currently visible.
Compliance checklist
- Payment items priced — passingEvery payment question charges a real amount, so a submission always records a payment.
- Conditional logic resolves — passingEvery rule points at a question or page that exists in this template.
- Legal text not required — passingThis template collects neither health nor regulated financial information.
- Question labels unique — passingLogic and exports address questions by label, so duplicates are ambiguous.
What happens after submit: nothing is stored in this preview. On your own copy, every response triggers an instant email notification and lands in your response dashboard, ready to export or forward.
Happy with it? Take a copy into your workspace — every question, rule and setting comes with it.
Who this template is for
GDPR Consent & Data Request Form is built for any team that needs demonstrable permission who need to record who agreed to what, and when.
- Any team that needs demonstrable permission working in consent, waivers & releases.
- Teams who need to record who agreed to what, and when without writing code or paying for a custom build.
- Anyone replacing consent claims you can't evidence months later with one structured record per enquiry.
- Respondents are customers, patients and participants — the form asks them 21 questions across 4 screens.
Why this form is useful
It removes the cost of consent claims you can't evidence months later and turns each submission into a record your team can act on immediately.
- 11 questions are required, so submissions arrive complete instead of needing a follow-up email.
- It collects a verified email address so replies and confirmations land.
- It captures a phone number for urgent follow-up.
- It accepts a document or photo upload as evidence.
- It records a signature you can keep as proof of agreement.
- It pins the request to a specific date.
- It captures a full postal address.
- It allows multiple selections without free text.
How to use this template
From copy to live form is a few minutes of work, and every step is reversible.
- 1Press “Use this template” — a fresh copy of GDPR Consent & Data Request Form lands in your workspace, ready to edit.
- 2Rename or delete any question, and change what is required. Nothing here is fixed.
- 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
- 4Check the upload limits on the file question so respondents can attach what you actually need.
- 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
- 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.
Logic and conditions blueprint
Exactly how this form behaves as it is answered — 3 conditional rules ship with it.
- Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears.
- Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent.
- Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent.
- All 3 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.
About this template
Data protection work splits into two jobs: recording consent properly and responding to requests within the statutory window. This form does both. The consent section asks the individual to opt in by channel — email, text, phone and post — and by purpose, so marketing, service updates and research are agreed separately rather than bundled into one tick box. Each choice is recorded with a timestamp, which is what a regulator asks to see. The request section lets the same person exercise their rights: access to their data, rectification, erasure, restriction of processing, portability, or objection to processing, with a description of what they are asking for and the date range involved. Identity verification is handled with an upload field, and requests made on someone else's behalf require confirmation of authority. The individual chooses how they want to receive a response and confirms the statutory response period has been explained. Because everything arrives as one structured record, your data protection lead can log and evidence each case immediately.
What this form asks
Every question is editable — rename it, make it optional, or delete it entirely.
Page 1 — About you
- Full namerequired
- Email addressrequired
- Contact number
- Address
- What are you doing today?required
- Are you acting on behalf of someone else?required
- Whose data is this, and what is your authority?
Page 2 — Consent preferences
- Contact me byrequired
- You may contact me aboutrequired
- May we share your details with partners?required
- How did we obtain your details?
Page 3 — Your request
- Which right are you exercising?
- Describe what you are requesting
- Which data would you like erased, and why?
- Data from (date)
- Data to (date)
- Preferred response formatrequired
- Proof of identity
Page 4 — Declaration
- Agreementrequired
- Signaturerequired
- Daterequired
21 questions in total.
How the form changes as it's filled in
This template ships with 3 conditional rules, grouped into 3 behaviours driven by 3 questions. Everything below is already set up — edit or delete any rule once the template is in your workspace.
Driven by “What are you doing today?”
- Reveals questions
If “What are you doing today?” is Making a data request, the form reveals “Which right are you exercising?”.
Driven by “Are you acting on behalf of someone else?”
- Makes answers required
If “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes required before the form can be submitted.
Driven by “Which right are you exercising?”
- Makes answers required
If “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes required before the form can be submitted.
Works in this layout
Forms that overlap this one
These pages cover the same subject ground as the gdpr consent & data request form, matched on the words people actually search for.
Marketing Opt-In Form
authorizationconsentdatagdprlegal
Quick Marketing Consent
authorizationcaptureconsentgdprlegal
Lawful Basis Record
authorizationconsentdatagdprlegal
Photo & Media Release Form
authorizationconsentgdprlegalliability
Background Check Consent Form
authorizationconsentgdprlegalliability
General Liability Waiver Form
authorizationconsentgdprlegalliability
Privacy & compliance
This form collects identity or financial details. Enable encrypted answers on the sensitive fields, avoid emailing full values in notifications, and delete responses once the check is complete.
Frequently asked questions
Does this replace a privacy policy?
No — it records consent and requests. Link your privacy notice from the form so people can read how their data is used.
Is the consent record defensible?
Each submission stores the exact options chosen with a timestamp, which is what evidencing consent requires.
How do we meet the response deadline?
Route request submissions to your data protection lead immediately and use the submission date as the clock start.
Can we use it for erasure requests?
Yes — selecting erasure reveals a required question about which data is involved so the request is actionable.
Is the GDPR Consent & Data Request Form template free to use?
Yes. You can preview and test GDPR Consent & Data Request Form on this page without an account, and take a copy into your own HelloForms workspace on the free plan. There is nothing to install and no card required to publish it.
What does the GDPR Consent & Data Request Form template ask for?
It asks 21 questions across 4 pages, 11 of which are required. Every question is listed in full further down this page, and each one can be renamed, reordered, made optional or deleted after you copy the template.
Can I edit the GDPR Consent & Data Request Form form after copying it?
Yes — the copy is entirely yours. Change wording, add or remove questions, switch between the classic layout, restyle it to match your brand, and set who gets notified on each submission.
How does the conditional logic in this consent, waivers & releases form work?
3 conditional rules ship with the template: Features advanced show logic: if “What are you doing today?” is Making a data request, the form dynamically exposes “Which right are you exercising?”. Otherwise that question never appears. Features conditional validation: if “Are you acting on behalf of someone else?” is Yes, “Whose data is this, and what is your authority?” becomes mandatory before the form can be sent. Features conditional validation: if “Which right are you exercising?” is Erasure, “Which data would you like erased, and why?” becomes mandatory before the form can be sent. All rules are editable in the Logic tab.
Where do responses to the GDPR Consent & Data Request Form form go?
Submissions land in your workspace under Submissions, where you can search, filter, label and export them to CSV or PDF. You can also email a notification to your team on every submission and send the respondent an auto-reply.
Can I embed the GDPR Consent & Data Request Form form on my own website?
Yes. Publish the form and paste the embed snippet into any page or share the direct link. The embedded form resizes to fit its container and loads no advertising or marketing trackers inside the iframe.
Can respondents upload files?
Yes. This template includes a file upload question, so respondents can attach documents or photos with their answers. You can adjust the accepted file types and size limits on that question.
Is the signature on this form legally usable?
The template captures a drawn signature and stores it with the submission, along with the timestamp, so you keep evidence of who agreed and when. Whether that is sufficient depends on your jurisdiction and the agreement itself.
Related templates
More forms teams pair with the gdpr consent & data request form.
Related categories
- Healthcare, Legal & Specialized templates
- Beauty, Salon & Spa templates
- Applications & Memberships templates
Marketing Opt-In Form
Granular email, SMS and post consent form built around UK GDPR and PECR — separate, unticked boxes per channel.📜 Consent, Waivers & Releases10 questionsShort form — 10 questions on a single page.View templateLawful Basis Record
Internal one-page record of which UK GDPR Article 6 basis applies to a data collection point, decided by whom and when.📜 Consent, Waivers & Releases11 questionsShort form — 11 questions on a single page.View templateQuick Marketing Consent
A clean, dated opt-in record with per-channel permissions.📜 Consent, Waivers & Releases5 questionsQuick to fill — 5 questions on a single page.View templateGeneral Liability Waiver Form
Record assumption of risk and a signed waiver for any activity.📜 Consent, Waivers & Releases25 questionsMedium length — 25 questions across 4 pages.View templateTelehealth Consent Form
Collects a patient's agreement to a remote video or phone visit, technology limits and emergency contact details.📜 Consent, Waivers & Releases13 questionsShort form — 13 questions across 2 pages.View templateWaiver Form
General-purpose liability waiver for activities, events or facility use, with participant details, risk acknowledgement and signature.📜 Consent, Waivers & Releases15 questionsShort form — 15 questions across 3 pages.View template