GDPR 或 CCPA 資料存取與刪除請求

Client: a customer who stopped using an online service and keeps getting its emails. Task: a clear request to see the data the company holds and then delete it. This is a template, not legal advice.

Subject: Data subject request under Articles 15 and 17 GDPR

Dear Data Protection Officer,

I am a former customer of [Service], registered with the email address [email].

1. Access (Article 15). Please send me a copy of all personal data you hold about me, the purposes of processing, the recipients you have shared it with, how long you keep it and where you got it if not from me.

2. Deletion (Article 17). After sending the copy, please delete all my personal data, including marketing lists, unless the law requires you to keep it. If you keep any data, please tell me what and why.

3. Marketing. Please stop sending me marketing emails now.

You must reply within one month of receiving this request. To confirm my identity, I am writing from the email address linked to my account.

Kind regards, [Name] [Date]

Note: keep a copy and the date sent. If there is no reply within one month, you can complain to your country's data protection authority.