GDPR Data Subject Access Request Form

Who this template is for

GDPR Data Subject Access Request Form is built for law firms and in-house legal teams who need to intake a matter with the facts, parties and consent recorded.

• Law firms and in-house legal teams working in legal & professional services.
• Teams who need to intake a matter with the facts, parties and consent recorded without writing code or paying for a custom build.
• Anyone replacing conflict checks delayed by missing intake detail with one structured record per enquiry.
• Respondents are clients and claimants — the form asks them 14 questions across 3 screens.
• Mobile-heavy audiences, thanks to the one-question-per-screen card layout.

Why this form is useful

It removes the cost of conflict checks delayed by missing intake detail and turns each submission into a record your team can act on immediately.

• 5 questions are required, so submissions arrive complete instead of needing a follow-up email.
• It collects a verified email address so replies and confirmations land.
• It accepts a document or photo upload as evidence.
• It captures a full postal address.
• It allows multiple selections without free text.
• Conditional logic hides 5 questions until they are relevant — shorter forms convert better than long ones.
• Splitting the form across 3 pages keeps each screen short and shows respondents how much is left.
• Every response is stored, searchable and exportable, so nothing depends on one person's inbox.

How to use this template

From copy to live form is a few minutes of work, and every step is reversible.

1. 1Press “Use this template” — a fresh copy of GDPR Data Subject Access Request Form lands in your workspace, ready to edit.
2. 2Rename or delete any question, and change what is required. Nothing here is fixed.
3. 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
4. 4Check the upload limits on the file question so respondents can attach what you actually need.
5. 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
6. 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.

Logic and conditions blueprint

Exactly how this form behaves as it is answered — 5 conditional rules ship with it.

• Features advanced show logic: if “Are you submitting this on someone else's behalf?” is Yes, the form dynamically exposes “Your relationship to the individual and authority to act”. Otherwise that question never appears.
• Features advanced show logic: if “What are you requesting?” is Access to my data, the form dynamically exposes “Which categories of data are you asking about?”. Otherwise that question never appears.
• Features advanced show logic: if “What are you requesting?” is Correction of my data, the form dynamically exposes “What is incorrect and what should it say instead?”. Otherwise that question never appears.
• Features advanced show logic: if “What are you requesting?” is Deletion of my data, the form dynamically exposes “Reason for the deletion request”. Otherwise that question never appears.
• Features advanced show logic: if “What are you requesting?” is Portability of my data, the form dynamically exposes “Preferred format and destination”. Otherwise that question never appears.
• All 5 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.