---
title: "Process (approve + execute) a GDPR request"
method: POST
path: "/customers/gdpr-requests/{id}/process"
tags: ["Admin Customer GDPR"]
---

# Process (approve + execute) a GDPR request

`POST /customers/gdpr-requests/{id}/process`

## Request

- Base URL: `http://localhost:8000/api/admin`
- URL: `http://localhost:8000/api/admin/customers/gdpr-requests/{id}/process`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/bagisto/apis/bagisto-admin-api/docs/customers/gdpr-requests/:id/process/post.ts> (a function with typed inputs; its response is checked against the schema)

Sets status to "approved" and, for type=delete requests, cascades the customer deletion. Refuses to re-process an already-approved request.

## Path parameters

- `id` integer, required

## Request body

- object
  - `message` string, nullable

## Response `200`

GDPR request processed.

## Other responses

- `400`: Invalid input
- `422`: Request already approved or revoked.

---

[API](https://skmtc.dev/bagisto/apis/bagisto-admin-api.md) - [All operations](https://skmtc.dev/bagisto/apis/bagisto-admin-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bagisto/apis/bagisto-admin-api/revisions/3198f11be70f?raw)