API tools faq
paste
Guest User

CCPA / GDPR templates

a guest
Aug 6th, 2026
45
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.61 KB | None | 0 0
raw download clone embed print report
  1. General Data Protection Regulation (GDPR) Maximized Demand Letter
  2.  
  3. [Your Name]
  4. [Your Address]
  5. [Your Email]
  6. [Date]
  7.  
  8. To: [Company Name] Data Protection Officer (DPO)
  9.  
  10. SUBJECT: GDPR DATA SUBJECT REQUEST
  11.  
  12. To the Data Protection Officer,
  13.  
  14. I am writing to formally exercise my rights under the General Data Protection Regulation (GDPR) regarding the personal data your organization processes concerning me. I demand the immediate execution of the following statutory rights:
  15. 1. Right of Access (Article 15)
  16.  
  17. I demand confirmation as to whether or not personal data concerning me are being processed. Under Article 15, I request a copy of the personal data undergoing processing, provided in a commonly used electronic form. Additionally, I request the following supplementary information:
  18.  
  19. The purposes of the processing.
  20.  
  21. The categories of personal data concerned.
  22.  
  23. The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations.
  24.  
  25. Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
  26.  
  27. Where the personal data are not collected from the data subject, any available information as to their source.
  28.  
  29. The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
  30.  
  31. 2. Right to Rectification (Article 16)
  32.  
  33. I reserve the right to correct inaccurate or incomplete personal data that you are processing.
  34. 3. Right to Erasure / "Right to be Forgotten" (Article 17)
  35.  
  36. I invoke my right to request that you delete any information about me that you have. Please erase all my personal data without undue delay.
  37. 4. Right to Restriction of Processing (Article 18)
  38.  
  39. Pending the completion of my erasure and access requests, I demand that you temporarily change the way you process my data and restrict all processing of my personal data.
  40. 5. Notification Obligation (Article 19)
  41.  
  42. I remind you of your obligation under Article 19. If you decide to take any action related to Articles 16, 17, or 18, you are required to notify me. Furthermore, you must communicate my requests for erasure and restriction to each recipient to whom the personal data has been disclosed.
  43. 6. Right to Data Portability (Article 20)
  44.  
  45. I require that the data provided pursuant to my Article 15 request be delivered in a structured, commonly used, and machine-readable format.
  46.  
  47. 7. Right to Object and Automated Decision-Making (Articles 21 & 22)
  48.  
  49. I object to the processing of my personal data for direct marketing purposes. Furthermore, I object to being subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning me or similarly significantly affects me.
  50.  
  51. I expect a response to this request without undue delay and in any event within one month of receipt.
  52.  
  53. Sincerely,
  54.  
  55. [Your Name]
  56.  
  57.  
  58. ==================
  59.  
  60. CCPA version
  61.  
  62. =================
  63.  
  64. California Consumer Privacy Act (CCPA / CPRA) Maximized Demand Letter
  65.  
  66. [Your Name]
  67. [Your Address]
  68. [Your Email]
  69. [Date]
  70.  
  71. To: [Company Name] Privacy Office / Data Protection Officer
  72.  
  73. SUBJECT: FORMAL CCPA / CPRA DATA SUBJECT REQUEST (MAXIMIZED RIGHTS EXERCISE)
  74.  
  75. To Whom It May Concern,
  76.  
  77. I am a resident of California. The California Legislature declares that the right to privacy is a personal and fundamental right protected by Section 1 of Article I of the Constitution of California and by the United States Constitution. I am writing to formally exercise my rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). I request that you fulfill the following demands regarding my personal information:
  78. 1. Right to Know and Access (Cal. Civ. Code § 1798.110 & § 1798.115)
  79.  
  80. I am exercising my right to request that your business disclose the following information to me:
  81.  
  82. The categories of personal information that the business collected about the consumer.
  83.  
  84. The specific pieces of personal information and sensitive personal information you have collected about me.
  85.  
  86. The categories of sources from which the personal information was collected.
  87.  
  88. The business or commercial purpose for collecting, selling, or sharing my personal information.
  89.  
  90. The categories of personal information that the business sold or shared about the consumer and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared.
  91.  
  92. The categories of personal information that the business disclosed about the consumer for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
  93.  
  94. I request this data in a portable, readily usable format.
  95. 2. Right to Delete (Cal. Civ. Code § 1798.105)
  96.  
  97. I demand that your business delete any personal information about me which you have collected from me. Furthermore, I demand that you notify any service providers or contractors to delete my personal information from their records.
  98. 3. Right to Correct (Cal. Civ. Code § 1798.106)
  99.  
  100. If any of the personal information you hold about me is inaccurate, I invoke my right to have that information corrected across your systems and downstream processors.
  101. 4. Right to Opt-Out of Sale and Sharing (Cal. Civ. Code § 1798.120)
  102.  
  103. I explicitly direct you to cease the sale and sharing of my personal information, including for cross-context behavioral advertising purposes.
  104. 5. Right to Limit Use of Sensitive Personal Information (Cal. Civ. Code § 1798.121)
  105.  
  106. I demand that you restrict the processing and use of my Sensitive Personal Information strictly to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer.
  107.  
  108. 6. Opt-Out of Automated Decision-Making and Profiling
  109.  
  110. I invoke my right to opt-out of automated decision-making technology, including profiling, and demand human review of any consequential decisions made regarding my account or data.
  111.  
  112. Please confirm receipt of this letter immediately. You have 45 days to fulfill this request. Any failure to comply or any retaliation against me for exercising these rights (Cal. Civ. Code § 1798.125) will result in a formal complaint to the California Privacy Protection Agency (CPPA).
  113.  
  114. Sincerely, [Your name]
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!