Requestor Details
Full legal name, contact email and phone, current mailing address, and any account or customer ID used to locate records.
A standardized form reduces ambiguity, speeds verification, and creates an auditable record of the request and the organization’s response. It helps demonstrate compliance with state privacy laws and reduces the risk of unauthorized deletions or regulatory disputes.
Organizations should designate a single team or role to manage intake, verification, and completion to ensure consistent handling and recordkeeping.
An individual whose personal data is held by the organization. Provide government name, contact details, and any account identifiers so staff can match records accurately and avoid erroneous deletions.
A person or entity authorized to act for the data subject (e.g., attorney or guardian). Include proof of authority and contact details to support identity verification and legal delegation.
Full legal name, contact email and phone, current mailing address, and any account or customer ID used to locate records.
Precise description of the records, data fields, or account identifiers to remove; include date ranges or transaction IDs when available for clarity.
If an agent files the request, attach written authorization or power of attorney and a copy of ID to support identity verification.
Document the method and outcome of identity proofing (email confirmation, SMS code, government ID check, or notarization) to create an audit trail.
State any legal exceptions (e.g., records subject to retention, litigation hold, tax or regulatory obligations) and which records will be retained.
Space for intake date, reviewer name, action taken, action date, and notes about data removed or retained for compliance reasons.
| Field | Setting | Required | Validation rules |
|---|---|
| Requestor Name | Required | Exact-match validation |
| Required | Deliver confirmation link | |
| Attach ID | Conditional | JPG or PDF only, max 10 MB |
| Signature | Required | Allow typed or eSignature with audit trail |
Ensure the platform supports secure uploads, audit trails, and the authentication methods your policy requires.
Confirm the vendor provides encryption in transit and at rest and that your configuration preserves logs for audits and legal requests.
Acknowledge receipt within 5 business days to confirm intake and next steps.
Respond within 45 days; one 45-day extension permitted with notice (California statute).
Complete identity proofing promptly; delays can extend overall response time.
Document criteria and faster deadlines only where law or policy requires them.
If data cannot be deleted due to legal hold, inform requester with the legal basis and expected retention.
Log intake, assign tracking ID, and send confirmation to requester.
Complete ID checks or request additional documentation if unclear.
Remove qualifying data or isolate records subject to retention hold.
Notify requester of actions taken and retain the case record for audit.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |
A customer requests deletion of account and transaction history
An attorney files on behalf of a client