Skip to content

Data Subject Requests

Data Subject Request (DSR) gives the visitors to your website a form to exercise their privacy rights, and gives you a dashboard in the Admin interface to handle the requests they submit. This page explains who can use the feature, how to set up the form, and how to manage incoming requests.

Privacy laws such as CCPA/CPRA and GDPR give people the right to control their personal data. With DSR, your website visitors (end users) can submit a request to:

  • Access their data.
  • Delete their data.
  • Correct their data.
  • Opt out of the sale and sharing of their data.

Each submitted request appears on the Dashboard tab of the Data Subject Request page, where you review and process it.

Availability

Requirement Details
Product Usercentrics Web CMP. The feature isn't available for the App CMP.
Admin Interface version The newest Admin Interface version.
Plan Paid plans, and the 14-day free trial. If you switch to the Free plan, the feature is no longer available.
Legal frameworks All legal frameworks except TCF and UK TCF.

Set up the DSR form

To set up the form, follow these steps:

  1. Open your configuration and go to Data Subject Request.

  2. Go to the Form tab.

  3. Turn on the Data Subject Request (DSR) form toggle. When the form is on, the page shows "Your form is active and accepting data requests from your website." When it's off, it shows "Your form is inactive and not accepting new requests."

  4. Under Request types, select the request types users can submit:

    • Access my data
    • Delete my data
    • Correct my data
    • Do not sell/share my data

  5. Under Form appearance, customize how the form looks:

    • Title: The heading at the top of the form.
    • Description: The text below the title.
    • Submit button label: The text on the submit button.
    • Custom logo URL: The address of the logo shown at the top of the form, for example https://yourcompany.com/logo.png.

  6. Under Requests delivery, set where submitted requests are sent:

    • Email recipients: Add at least one valid email address.
    • Email subject line: The subject of the notification email.

  7. Under Add the form to your website, copy the form URL from Use form link manually. Add it wherever you want visitors to find it, such as your website footer, your privacy page, or a custom location.

  8. Click Preview to check how the form looks.

  9. Click Save Draft, then Publish.

What your visitors see

The following is a screenshot of the form:

The DSR form that visitors see, with request type, request details, contact details, a consent checkbox and a Submit request button.

Visitors fill in the form with the following fields:

Section Field Description
Request Information Type of Request A drop-down with the request types you turned on.
Request Information Request Details A free-text box for more information about the request.
Contact Details First Name The visitor's first name.
Contact Details Last Name The visitor's last name.
Contact Details Email Address The address used to identify and contact the visitor.

After submitting the form, the visitor receives an email to verify their email address.

After verifying the email address, the request appears under Data Subject Request > Dashboard. The emails defined at the setup in the Email recipients field receive a notification about the request.

Manage requests on the dashboard

Submitted requests appear under Data Subject Request > Dashboard. Each request has its own row with these columns:

Column Description
No A unique request number, for example DSR-010.
Date The date and time the visitor submitted the request.
Name The name the visitor entered.
Status The processing status of the request. Change it with the drop-down in the row. The available statuses are listed below the table.
Request type The type of request: access, delete, correct, or do not sell or share.
Details Information that the requester typed into the Request Details field on the form.
Email Verified email of the visitor.
Controller ID The controller ID that is in the banner when the visitor initiated the request, if you are using the CMP banner (ID to request consent data field).

The statuses are:

  • New: The request was just submitted.
  • Needs verification: Select this when you need to confirm if this request is valid.
  • In progress: You're working on the request.
  • Closed: You've finished handling the request.

When you change the status of a request, the visitor receives an email about the update.

To find a request:

  • Search by email: use the search field above the table.
  • Filter by status: use the All statuses drop-down.
  • Filter by request type: use the All request types drop-down.
  • Sort: click a column heading with sort arrows (No, Date, Name, Status, Request type).

The Dashboard tab of the Data Subject Request page, showing the search field, the status and request type filters, and a request row with the Status drop-down open.

Emails the feature sends

The DSR feature sends these emails:

  • Confirmation to the visitor: After a visitor submits the form, they receive an email with a link to confirm their request. A request is valid only after the visitor confirms it.
  • Notification to you: Each address in Email recipients receives a notification about the new request.
  • Status update to the visitor: When you change the status of a request, the visitor receives an email about the update.