New: a ready-to-use data breach response checklist.New: data breach response checklist.Download the checklist
Free templateXLSX and ODS

Access and Erasure Request Log

One file to answer within one month when someone asks for their data or asks you to delete it: the log works out the deadline, and the reply templates and final check stop things slipping.

  • A request log that works out each deadline, and a dashboard with what is about to fall due
  • Reply templates to adapt to each case, from the acknowledgement to a reasoned refusal
  • Where to look for the data, and a check before the reply goes out
Reviewed
23 Oct 2026
Legal basis
GDPR Art. 12, 15 and 17
Size
61 KB (XLSX) · 52 KB (ODS)

Download the kit

Enter your email and download both versions straight away, Excel and LibreOffice.

Helps us choose the next resources.

See how we handle your data in the privacy policy.

What’s inside

Seven sheets, one month without surprises.

Sheet 1Start hereHow to use the file and what to do on the day a request arrives.
Sheet 2DashboardThe open requests and the deadlines coming up.
Sheet 3Request logOne row per request, with the deadline worked out from the day it arrived.
Sheet 4Reply templatesReady-to-adapt texts for each step and each type of request.
Sheet 5Where to lookThe systems and folders where the data usually sits.
Sheet 6Before you sendWhat to confirm before the reply goes out.
Sheet 7SettingsPublic holidays and list values, which you can adjust.
Request logDashboardReply templatesWhere to look
Ref.Date receivedChannelRequester (name)Requester contactRequest type
EX-0012026-10-06General info@ emailPaulo Mendes (fictional)paulo.m@example.comAccess
EX-0022026-11-18Shop contact formSofia (fictional)sofia@example.comErasure
EX-0032026-09-30LetterFormer customer (fictional)Postal address on fileAccess
Preview of the "Request log" sheet. The example requests are fictional.

Frequently asked questions

Do I have to give my email?

Yes. It helps us understand who uses the resources. We don’t ask for your name or company, and the newsletter only starts if you tick the box.

Can I use the kit with my clients?

You can use it in your organisation and in work for clients. You just can’t resell it as a product.

Does it replace legal advice?

No. The kit follows the GDPR and the guidance of the CNPD (Portugal’s data protection authority) and the EDPB, but each organisation has to confirm what applies to its own case.

Guide · 14 minAccess and erasure requests: answer within one month, without panicThe step-by-step process that goes with this log, with the requests that reach Oficina Rocha.Read the guide