---
title: "Create Data Subject Request for DROP Record"
method: POST
path: "/api/drop-manager/v2/drop/{dropId}/request"
tags: ["DROP Management"]
---

# Create Data Subject Request for DROP Record

`POST /api/drop-manager/v2/drop/{dropId}/request`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/drop-manager/v2/drop/{dropId}/request`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `DSAR_WRITE`

Use this API to create a data subject request for a DROP record.

## Path parameters

- `dropId` string, required

## Request body

- PrivacyAutomationDROPManagementCreateRequestQueue
  - `dropRequestType` 'DataDeletion' | 'OptOut', required: Drop Request Type
  - `firstName` string: First name of the respondent.
  - `lastName` string: Last name of the respondent.
  - `email` string: Email address of the respondent.
  - `language` string, required: The ISO language code for OneTrust supported languages. Examples: en-us for English, de for German, fr for French, etc.
  - `additionalData` object: Additional fields in key value format, required for request processing. These could be webform or non webform fields
  - `requestTypes` string[]: Respondents privacy request type. This should match with the webform request type.
  - `subjectTypes` string[]: Respondents subject type or relation ship with tenant. This should match with the webform subject type.
  - `multiselectFields` object: Multi-select fields in key-value format where values are lists of selected options
  - `requestTraceId` string, uuid: Unique trace id for request
  - `templateId` string, uuid, required: Template ID for request creation
  - `attachments` PrivacyAutomationDROPManagementAttachmentV2Dto[]: File attachment details for request.
    - `statusId` integer: Status ID of the attachment
    - `resourcePath` string: Resource path of the attachment
    - `fileName` string, required: Attached file name
    - `fileId` string, uuid, required: ID of attached file

## Response `201`

Created

- PrivacyAutomationDROPManagementRequestQueueV2Dto
  - `requestQueueRefId` string: Reference ID of the request. This is a 10-character ID that is unique to each request.
  - `requestQueueId` string, uuid: The request GUID
  - `firstName` string: First name of the data subject.
  - `lastName` string: Last name of the data subject.
  - `organization` string: Organization to which this request is assigned.
  - `status` string: Current stage of the request. Various stages in the order of progression are: New, Verifying identity, In progress, Rejected, Complete.
  - `requestTypes` string[]: Request types selected while submitting the request.
  - `deadline` string, date-time: Deadline for the request.
  - `isExtended` boolean: Returns true if the request complete time is being extended.
  - `dateCreated` string, date-time: Date on which request is submitted.
  - `dateUpdated` string, date-time: Last activity date on the request.
  - `subjectTypes` string[]: Subject types selected while submitting the request. Subject type can be: Prospective Employee, Student, Customer, Contractor, Employee, Patient.
  - `approver` string: Approver or assignee for the request.
  - `language` string: Language in which the request is created.
  - `countryCode` string: The code for the country as per ISO 3166. e.g. US for the United States, DE for Germany.
  - `countryName` string: Name of the country.
  - `email` string: Email provided while submitting the request.
  - `workflow` string: Name of the request workflow.
  - `webform` string: Name of the webform.
  - `dateCompleted` string, date-time: Date on which the request is completed.
  - `resolution` string: Resolution selected if the request is rejected.
  - `remainingDaysForMaxDeadline` integer: Legal Deadline + Maximum Number of Extension Days based on country of request + Total Pause days.
  - `maxDeadlineExtensionDate` string, date-time: Legal Deadline + Maximum Number of Extension Days based on country of request + Total Pause days.
  - `assignedToGroup` boolean: Indicates if the request reviewer is assigned to a usergroup or not.
  - `additionalStatuses` '0' | '10': Status of the request timer, such as PAUSED or ACTIVE.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/privacy-automation-data-subject-request-dsr-automation.md) - [All operations](https://skmtc.dev/onetrust/apis/privacy-automation-data-subject-request-dsr-automation/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/privacy-automation-data-subject-request-dsr-automation/revisions/612f0b39b904?raw)