---
title: "List GDPR requests."
method: GET
path: "/v1/compliance/gdpr/requests"
tags: ["Compliance"]
---

# List GDPR requests.

`GET /v1/compliance/gdpr/requests`

## Request

- Base URL: `https://api.scalix.world`
- URL: `https://api.scalix.world/v1/compliance/gdpr/requests`
- Auth: HTTP bearer

Returns the data-subject requests for the caller's tenant.

## Response `200`

Data-subject requests for the caller's tenant

- DataSubjectRequest[]
  - `id` string, uuid, required
  - `tenant_id` string, required
  - `subject_email` string, required
  - `request_type` 'export' | 'erasure' | 'rectification' | 'access', required
  - `status` 'pending' | 'in_progress' | 'completed' | 'rejected', required
  - `notes` string, nullable
  - `created_at` string, date-time, required
  - `completed_at` string, date-time, nullable

## Other responses

- `401`: Missing or invalid credentials
- `403`: Token lacks the compliance:read scope
- `500`: Internal error

---

[API](https://skmtc.dev/scalix/apis/scalix-cloud-api.md) · [All operations](https://skmtc.dev/scalix/apis/scalix-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalix/apis/scalix-cloud-api/revisions/2c04ca0a90bb?raw)