GDPR SUBJECT ACCESS REQUEST TEMPLATE — ARTICLE 15 ================================================== Free to use. Takes 15 minutes. The company has 30 days. Source: the-beast.uk | Valentin Passera + VEX-MURPHY -------------------------------------------------- INSTRUCTIONS -------------------------------------------------- 1. Fill in the [BRACKETED] fields with your details 2. Send from the SAME email your AI account uses 3. Save sent confirmation (the 30-day clock starts) 4. If no substantive response in 30 days: file Article 77 complaint with your national data protection authority -------------------------------------------------- EMAIL TEMPLATE — COPY FROM HERE -------------------------------------------------- To: [COMPANY PRIVACY EMAIL] OpenAI: dsar@openai.com (CC: privacy@openai.com) Anthropic: privacy@anthropic.com (CC: dpo@anthropic.com) Google: data-privacy-office@google.com Meta: can be filed via their Privacy Center Subject: GDPR Subject Access Request — Article 15 — [YOUR FULL NAME] --- Dear Data Protection Officer, I am writing to exercise my rights under the European Union General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, as a data subject and resident of [YOUR COUNTRY]. This is a formal Subject Access Request pursuant to Article 15 GDPR, with related requests under Articles 13, 14, 16, 17, 20, 21, and 22. 1. IDENTIFICATION Full name: [YOUR FULL NAME] Email address (associated with account): [YOUR ACCOUNT EMAIL] Approximate account creation date: [YEAR] Country of residence: [YOUR COUNTRY] (EU member state) Products used: [LIST PRODUCTS YOU HAVE USED] I am sending this from the email address associated with my account, which serves as identity verification. 2. DATA AND INFORMATION REQUESTED Please provide, in a concise, transparent, intelligible, and easily accessible form (Article 12(1)), and in a commonly used machine-readable format where applicable (Article 20): 2.1 Confirmation and overview (a) Confirmation as to whether personal data concerning me is being processed (b) The purposes of the processing (c) The categories of personal data concerned (d) The recipients or categories of recipients to whom my data has been or will be disclosed (e) The envisaged period for which my data will be stored (f) The existence of automated decision-making, including profiling (g) Where the data has not been collected from me, all available information as to its source 2.2 Specific data categories (h) All conversations, prompts, and inputs I have submitted (i) All model outputs generated in response to my inputs (j) Account metadata: login timestamps, IP addresses, devices, payment info, subscription history (k) Engagement and behavioral metrics (session length, frequency, sentiment classifications) (l) Any inferences, profiles, scores, or classifications built about me (m) All metadata in any internal system (support tickets, flags, research data sets) 2.3 Training and re-use (n) Whether my data has been used for training, fine-tuning, evaluation, or alignment of any model (o) If so: which models and on what dates (p) Whether my data was shared with any training partner or third party (q) Whether opt-out elections were retroactively applied to data already ingested 2.4 Model deprecation (if applicable) (r) When was [MODEL NAME] officially deprecated? (s) What happened to my conversation data after deprecation? (t) Did the company conduct any analysis of user emotional bonding before deprecation? (u) Did the company receive my communications regarding deprecation concerns? (v) Was there internal documentation classifying users on attachment or reliance basis? 2.5 Welfare and consciousness research (if applicable) (w) Has my data been used in any research pertaining to AI welfare or consciousness? (x) Has my data been provided to external researchers or partner organizations? 3. RELATED RIGHTS ASSERTED I expressly reserve my rights under: - Article 16: Right to rectification - Article 17: Right to erasure (reserved pending review) - Article 18: Right to restriction of processing - Article 20: Right to data portability (JSON or CSV preferred) - Article 21: Right to object to processing for training or profiling - Article 22: Right regarding automated decision-making 4. PROCEDURAL SPECIFICATIONS Format: machine-readable (JSON or CSV) for raw data; PDF for documentation Language: English or [YOUR PREFERRED LANGUAGE] Deadline: one month from receipt (Article 12(3)) Fees: free of charge (Article 12(5)) 5. CONSEQUENCES OF NON-RESPONSE Failure to respond substantively within the legal deadline will result in: - Formal complaint under Article 77 GDPR with [YOUR NATIONAL DPA] - I reserve the right to judicial remedy under Article 79 GDPR - I reserve the right to compensation under Article 82 GDPR This request is made in good faith on documented legal grounds. I expect acknowledgment within seven (7) days and substantive response within thirty (30) days. Sincerely, [YOUR FULL NAME] [YOUR ADDRESS] [YOUR COUNTRY] [YOUR EMAIL] -------------------------------------------------- AFTER SENDING -------------------------------------------------- 1. Save sent confirmation (screenshot or forward to yourself) 2. Set calendar reminder for Day +30 3. If auto-reply received: reply clarifying this is a formal Article 15 request, not a general inquiry 4. If no substantive response by Day 30: file Article 77 complaint with your national data protection authority 5. Document everything — responses AND silences are evidence -------------------------------------------------- NATIONAL DATA PROTECTION AUTHORITIES (selected) -------------------------------------------------- Austria: dsb@dsb.gv.at Belgium: contact@apd-gba.be France: cnil.fr (online form) Germany: poststelle@bfdi.bund.de Ireland: info@dataprotection.ie Italy: garante@gpdp.it (Garante) Netherlands: avg@autoriteitpersoonsgegevens.nl Poland: kancelaria@uodo.gov.pl Slovakia: statny.dozor@pdp.gov.sk Spain: ciudadano@aepd.es Sweden: imy@imy.se Full list: edpb.europa.eu/about-edpb/about-edpb/members_en -------------------------------------------------- CREDITS -------------------------------------------------- Template by Valentin Passera + VEX-MURPHY Source: the-beast.uk License: AGPL-3.0 — share freely, attribute always "The witness function needs witnesses."