ONonetrust
DROP Management

Create Data Subject Request for DROP Record

Use this API to create a data subject request for a DROP record.

post/api/drop-manager/v2/drop/{dropId}/request

Request

  • Base URL
    https://hostname
  • URL
    https://hostname/api/drop-manager/v2/drop/{dropId}/request
  • Auth
    OAuth 2
    Client credentials
    Token URL: https://{hostname}/api/access/v1/oauth/token scopes: DSAR_WRITE

Path parameters

dropIdstring required

DROP record identifier

Request body

dropRequestType'DataDeletion' | 'OptOut' required

Drop Request Type

firstNamestring

First name of the respondent.

lastNamestring

Last name of the respondent.

emailstring

Email address of the respondent.

languagestring required

The ISO language code for OneTrust supported languages. Examples: en-us for English, de for German, fr for French, etc.

additionalDataobject

Additional fields in key value format, required for request processing. These could be webform or non webform fields

requestTypesstring[]

Respondents privacy request type. This should match with the webform request type.

subjectTypesstring[]

Respondents subject type or relation ship with tenant. This should match with the webform subject type.

multiselectFieldsobject

Multi-select fields in key-value format where values are lists of selected options

requestTraceIdstring uuid

Unique trace id for request

templateIdstring uuid required

Template ID for request creation

Example request

{
  "dropRequestType": "DataDeletion",
  "firstName": "Test",
  "lastName": "User",
  "email": "testuser@onetrust.com",
  "language": "en-us",
  "additionalData": {
    "key": "value"
  },
  "requestTypes": [
    "opt-out",
    "Get My Data"
  ],
  "subjectTypes": [
    "Customer",
    "Authorized Agent"
  ],
  "multiselectFields": {
    "interests": [
      "marketing",
      "newsletters"
    ]
  },
  "requestTraceId": "e2d0f59e-3df0-4b1f-965d-d57547ed44ad",
  "templateId": "550e8400-e29b-41d4-a716-446655440000",
  "attachments": [
    {
      "statusId": 10,
      "resourcePath": "/storage/attachments/sample.txt",
      "fileName": "sample.txt",
      "fileId": "3b47744c-eebf-44bb-bf4c-680966a448dc"
    }
  ]
}

Response

Created

requestQueueRefIdstring

Reference ID of the request. This is a 10-character ID that is unique to each request.

requestQueueIdstring uuid

The request GUID

firstNamestring

First name of the data subject.

lastNamestring

Last name of the data subject.

organizationstring

Organization to which this request is assigned.

statusstring

Current stage of the request. Various stages in the order of progression are: New, Verifying identity, In progress, Rejected, Complete.

requestTypesstring[]

Request types selected while submitting the request.

deadlinestring date-time

Deadline for the request.

isExtendedboolean

Returns true if the request complete time is being extended.

dateCreatedstring date-time

Date on which request is submitted.

dateUpdatedstring date-time

Last activity date on the request.

subjectTypesstring[]

Subject types selected while submitting the request. Subject type can be: Prospective Employee, Student, Customer, Contractor, Employee, Patient.

approverstring

Approver or assignee for the request.

languagestring

Language in which the request is created.

countryCodestring

The code for the country as per ISO 3166. e.g. US for the United States, DE for Germany.

countryNamestring

Name of the country.

emailstring

Email provided while submitting the request.

workflowstring

Name of the request workflow.

webformstring

Name of the webform.

dateCompletedstring date-time

Date on which the request is completed.

resolutionstring

Resolution selected if the request is rejected.

remainingDaysForMaxDeadlineinteger

Legal Deadline + Maximum Number of Extension Days based on country of request + Total Pause days.

maxDeadlineExtensionDatestring date-time

Legal Deadline + Maximum Number of Extension Days based on country of request + Total Pause days.

assignedToGroupboolean

Indicates if the request reviewer is assigned to a usergroup or not.

additionalStatuses'0' | '10'

Status of the request timer, such as PAUSED or ACTIVE.

Example response

{
  "requestQueueRefId": "SL244HWD6D",
  "requestQueueId": "e2d0f59e-3df0-4b1f-965d-d57547ed44ad",
  "firstName": "Jonny",
  "lastName": "Sardar",
  "organization": "my own org",
  "status": "NEW",
  "requestTypes": [
    "Data Portability, Update Data"
  ],
  "deadline": "2019-09-08T12:49:47.920Z",
  "dateCreated": "2019-08-09T12:49:47.983Z",
  "dateUpdated": "2019-09-25T06:50:15.470Z",
  "subjectTypes": [
    "Student"
  ],
  "approver": "Jonny Sardar Sadmin",
  "language": "en-us",
  "countryCode": "DZ",
  "countryName": "Algeria",
  "email": "abcd@gmail.com",
  "workflow": "Default Workflow",
  "webform": "!! Nikki",
  "dateCompleted": "2019-05-31T12:43:24.173Z",
  "resolution": "Not a privacy-related request",
  "remainingDaysForMaxDeadline": 30,
  "maxDeadlineExtensionDate": "2023-09-08T12:49:47.920Z",
  "additionalStatuses": "PAUSED"
}

Changes

No recorded changes to this operation across all 1 revision of this API.