GDPR Data Request Generator

A GDPR data request is a formal letter to a company (the data controller) asking it to act on one of your rights under the General Data Protection Regulation. The most common is a Data Subject Access Request (DSAR), where you ask for a copy of the personal data held about you. You can also ask the company to delete, correct, transfer, or restrict the use of your data.

Five of the core data subject rights: access (Article 15), erasure or the right to be forgotten (Article 17), rectification of inaccurate data (Article 16), data portability (Article 20), and restriction of processing (Article 18). The letter automatically cites the right article and explains what you are asking the company to do.

Under Article 12(3) of the GDPR, the controller must respond without undue delay and within one month of receiving your request. That period can be extended by up to two further months for complex or numerous requests, but the company must tell you within the first month and explain why. The generated letter states this one-month deadline for you.

Yes. This generator runs entirely in your browser. Your name, email, the company name, account reference, and any details you type are never uploaded, sent to a server, or stored anywhere, so your information stays on your own device.

Use the Copy button to paste it into an email to the company's privacy team or data protection officer, the Download button to save it as a plain-text .txt file, or the Print button to print it or save a PDF through your browser. Sending by email or recorded delivery helps you prove when the one-month clock started.

No. This tool produces a plain-text template to help you exercise your GDPR rights. It is not a law firm and does not provide legal advice. How the GDPR applies can depend on your situation and where you live, so consider checking with your local data protection authority or a qualified professional if you are unsure.