Skip to content
papii

Document template · eu.gdpr.dsar_response

Data Subject Access Request Response

  • Render-verified
  • Legal-sensitive
  • Version 1.0.0

Response letter sent to a data subject exercising the right of access. Must be supplied without undue delay and in any case within one month of receipt (Art. 12(3)), extensible by two further months where necessary.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 36 fields:

Field Required Type Description
reference Optional string
response_date Optional date
controller Required object
controller.name Required string
controller.address Optional string
controller.contact_email Required string
controller.dpo_email Optional string
request Required object
request.received_on Required date
request.channel Required string
request.scope_requested Optional string
request.identity_verified_on Optional date
request.identity_verification_method Optional string
data_subject Required object
data_subject.name Required string
data_subject.address Optional string
data_subject.email Optional string
data_subject.reference Optional string
response Required object
response.decision Required enum
response.extension_new_deadline Optional date
response.refusal_reason Optional string
response.partial_scope_reason Optional string
response.delivery_method Optional string
activities Required array of object Per Art. 15(1)(a)-(h), the controller must confirm processing and supply the specified information for each activity.
activities[].purpose Required string
activities[].data_categories Optional array of string
activities[].recipients Optional array of string
activities[].retention Optional string
activities[].source Optional string

+6 more fields — the full JSON Schema is available in the dashboard and via the API.

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "eu.gdpr.dsar_response",
    "data": { ... },
    "options": {"language": "en"}
  }' -o dsar-response.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Data Subject Access Request Response”?

Response letter sent to a data subject exercising the right of access. Must be supplied without undue delay and in any case within one month of receipt (Art. 12(3)), extensible by two further months where necessary. On papii this document is available as template eu.gdpr.dsar_response: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Data Subject Access Request Response with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Data Subject Access Request Response template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.