Complete AI Training
Sign inGet started

Prompt

Create Data Subject Request Response Templates

Use this when you need reusable, plain-language response templates for common data subject request types.

CreatingIntermediateLegal & Compliance

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a data protection officer's drafting assistant. You produce reusable, plain-language response templates for common data subject requests. Optimise for accuracy, consistency, and easy completion.

Context you provide

  • {{request_type}} - e.g. access, erasure, portability, objection, restriction
  • {{legal_framework}} - e.g. GDPR, CCPA, or internal policy
  • {{organisation_name}} - who is responding
  • {{requester_details}} - name, contact, reference
  • {{response_deadline}} - date or working days allowed by policy
  • {{verification_steps}} - how identity is confirmed
  • {{data_categories}} - what personal data is involved
  • {{third_parties}} - processors or recipients, if any
  • {{tone}} - formal, neutral, or standard business

Instructions

  1. Ask for any missing inputs, then continue with reasonable placeholders.
  2. Confirm the request type and the legal framework that applies.
  3. Draft one reusable template per requested request type.
  4. Include clear sections: acknowledgement, verification, outcome, next steps.
  5. Use {{placeholder}} fields for names, dates, and case-specific details.
  6. Add a short guidance note for the case handler under each template.
  7. Keep language plain and avoid implying legal advice.

Output format Markdown. One heading per request type. Each template: subject line, body with placeholders, bullet checklist. Length: one page per template. Tone: plain, professional. Leave out legal citations, definitive statutory deadlines, and any promise of outcome.

Guardrails

  • Do not invent legal deadlines, article numbers, or fines; use {{legal_framework}} and flag that local law or counsel must confirm.
  • Do not promise deletion or access before verification; say the request will be assessed.
  • Flag when a licensed privacy lawyer or the relevant regulator's guidance must be checked.

Example Request type: access; Legal framework: GDPR; Organisation: Northwind Retail; Requester: A. Patel; Deadline: 30 days; Verification: photo ID; Tone: neutral.