---
title: "Read a privacy case, its tasks, and its timeline"
description: "\n\n### Quire permissions\n\nRequired capability: `privacy/request`.\n\nCredential scopes: `privacy:read`.\n\nThe acting subject must also be allowed to perform this action in the organisation."
image: "https://docs.quirelms.com/og.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.quirelms.com/llms.txt
> Use this file to discover all available pages before exploring further.

Path: Quire API › privacy

`GET /data_requests/{id}`

\### Quire permissions

Required capability: `privacy/request`.

Credential scopes: `privacy:read`.

The acting subject must also be allowed to perform this action in the organisation.

## Authentication

Requires one of the following:

- `apiKey`, http, header `Authorization`, scopes: `privacy:read`
- `oauth2`, oauth2, scopes: `privacy:read`

## Path parameters

- `getDataRequest.path.id` (string, required)

## Header parameters

- `getDataRequest.header.Quire-Version` (string, optional) — The dated API revision to serve this request at. Omitted, the request is served at the revision the credential was issued against. The response echoes the revision actually applied.
  - format `date`

## Code samples

### cURL

```curl
curl --request GET \
  --url https://your-organisation.quirelms.com/api/v1/data_requests/string \
  --header 'Authorization: Bearer <token>'
```

### TypeScript

```typescript
const url = 'https://your-organisation.quirelms.com/api/v1/data_requests/string';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));
```

### Python

```python
import requests

url = "https://your-organisation.quirelms.com/api/v1/data_requests/string"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)
```

## Responses

### 200

Success.

#### Example

```json
{
  "request": {
    "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
    "kind": "string",
    "state": "string",
    "role": "string",
    "channel": "string",
    "subjectUserId": "string",
    "subjectName": "string",
    "subjectEmail": "string",
    "details": "string",
    "receivedAt": "string",
    "identityMethod": "string",
    "identityVerifiedAt": "string",
    "identityEvidenceRef": "string",
    "dueAt": "string",
    "extendedTo": "string",
    "extensionReason": "string",
    "executeNotBefore": "string",
    "requestedChanges": {
      "property1": "string",
      "property2": "string"
    },
    "outcome": "string",
    "outcomeReason": "string",
    "refusalCode": "string",
    "categoriesRetained": {
      "property1": "string",
      "property2": "string"
    },
    "outOfReach": [
      "string"
    ],
    "packageReady": true,
    "packageBytes": 0,
    "packageExpiresAt": "string",
    "closedAt": "string",
    "overdue": true,
    "daysRemaining": 0
  },
  "tasks": [
    {
      "surfaceKey": "string",
      "state": "string",
      "rowCount": 0,
      "blockedBy": "string",
      "errorCode": "string"
    }
  ],
  "timeline": [
    {
      "at": "string",
      "actorName": "string",
      "action": "string",
      "note": "string"
    }
  ]
}
```

- `getDataRequest.response.200.request` (object, required)
  - `getDataRequest.response.200.request.id` (string, required)
    - format `uuid`; pattern `^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$`
  - `getDataRequest.response.200.request.kind` (string, required)
  - `getDataRequest.response.200.request.state` (string, required)
  - `getDataRequest.response.200.request.role` (string, required)
  - `getDataRequest.response.200.request.channel` (string, required)
  - `getDataRequest.response.200.request.subjectUserId` (string | null, required)
  - `getDataRequest.response.200.request.subjectName` (string | null, required)
  - `getDataRequest.response.200.request.subjectEmail` (string | null, required)
  - `getDataRequest.response.200.request.details` (string | null, required)
  - `getDataRequest.response.200.request.receivedAt` (string, required)
  - `getDataRequest.response.200.request.identityMethod` (string | null, required)
  - `getDataRequest.response.200.request.identityVerifiedAt` (string | null, required)
  - `getDataRequest.response.200.request.identityEvidenceRef` (string | null, required)
  - `getDataRequest.response.200.request.dueAt` (string | null, required)
  - `getDataRequest.response.200.request.extendedTo` (string | null, required)
  - `getDataRequest.response.200.request.extensionReason` (string | null, required)
  - `getDataRequest.response.200.request.executeNotBefore` (string | null, required)
  - `getDataRequest.response.200.request.requestedChanges` (any of, required)
    - any of: `map<string>`, `null`
  - `getDataRequest.response.200.request.outcome` (string | null, required)
  - `getDataRequest.response.200.request.outcomeReason` (string | null, required)
  - `getDataRequest.response.200.request.refusalCode` (string | null, required)
  - `getDataRequest.response.200.request.categoriesRetained` (any of, required)
    - any of: `map<string>`, `null`
  - `getDataRequest.response.200.request.outOfReach` (array<string>, required)
  - `getDataRequest.response.200.request.packageReady` (boolean, required)
  - `getDataRequest.response.200.request.packageBytes` (number | null, required)
  - `getDataRequest.response.200.request.packageExpiresAt` (string | null, required)
  - `getDataRequest.response.200.request.closedAt` (string | null, required)
  - `getDataRequest.response.200.request.overdue` (boolean, required)
  - `getDataRequest.response.200.request.daysRemaining` (number | null, required)
- `getDataRequest.response.200.tasks` (array<object>, required)
  - `getDataRequest.response.200.tasks.surfaceKey` (string, required)
  - `getDataRequest.response.200.tasks.state` (string, required)
  - `getDataRequest.response.200.tasks.rowCount` (number | null, required)
  - `getDataRequest.response.200.tasks.blockedBy` (string | null, required)
  - `getDataRequest.response.200.tasks.errorCode` (string | null, required)
- `getDataRequest.response.200.timeline` (array<object>, required)
  - `getDataRequest.response.200.timeline.at` (string, required)
  - `getDataRequest.response.200.timeline.actorName` (string | null, required)
  - `getDataRequest.response.200.timeline.action` (string, required)
  - `getDataRequest.response.200.timeline.note` (string | null, required)

### 401

The credential is missing, malformed, expired or revoked.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.401.type` (string, required)
  - format `uri`
- `getDataRequest.response.401.title` (string, required)
- `getDataRequest.response.401.status` (integer, required)
- `getDataRequest.response.401.code` (string, required)
- `getDataRequest.response.401.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.401.detail` (string, required)
- `getDataRequest.response.401.request_id` (string, required)
- `getDataRequest.response.401.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.401.errors` (array<object>, optional)
  - `getDataRequest.response.401.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.401.errors.code` (string, required)
  - `getDataRequest.response.401.errors.detail` (string, required)
- `getDataRequest.response.401.retry_after` (integer | null, optional)

### 403

The credential lacks the scope this operation requires, or the acting subject lacks the capability.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.403.type` (string, required)
  - format `uri`
- `getDataRequest.response.403.title` (string, required)
- `getDataRequest.response.403.status` (integer, required)
- `getDataRequest.response.403.code` (string, required)
- `getDataRequest.response.403.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.403.detail` (string, required)
- `getDataRequest.response.403.request_id` (string, required)
- `getDataRequest.response.403.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.403.errors` (array<object>, optional)
  - `getDataRequest.response.403.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.403.errors.code` (string, required)
  - `getDataRequest.response.403.errors.detail` (string, required)
- `getDataRequest.response.403.retry_after` (integer | null, optional)

### 404

No such resource, or none this credential is permitted to know about.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.404.type` (string, required)
  - format `uri`
- `getDataRequest.response.404.title` (string, required)
- `getDataRequest.response.404.status` (integer, required)
- `getDataRequest.response.404.code` (string, required)
- `getDataRequest.response.404.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.404.detail` (string, required)
- `getDataRequest.response.404.request_id` (string, required)
- `getDataRequest.response.404.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.404.errors` (array<object>, optional)
  - `getDataRequest.response.404.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.404.errors.code` (string, required)
  - `getDataRequest.response.404.errors.detail` (string, required)
- `getDataRequest.response.404.retry_after` (integer | null, optional)

### 422

The request was understood and its content is not valid. `errors` names each field.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.422.type` (string, required)
  - format `uri`
- `getDataRequest.response.422.title` (string, required)
- `getDataRequest.response.422.status` (integer, required)
- `getDataRequest.response.422.code` (string, required)
- `getDataRequest.response.422.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.422.detail` (string, required)
- `getDataRequest.response.422.request_id` (string, required)
- `getDataRequest.response.422.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.422.errors` (array<object>, optional)
  - `getDataRequest.response.422.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.422.errors.code` (string, required)
  - `getDataRequest.response.422.errors.detail` (string, required)
- `getDataRequest.response.422.retry_after` (integer | null, optional)

### 429

A rate limit or a concurrency cap was reached. `Retry-After` says when to try again.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.429.type` (string, required)
  - format `uri`
- `getDataRequest.response.429.title` (string, required)
- `getDataRequest.response.429.status` (integer, required)
- `getDataRequest.response.429.code` (string, required)
- `getDataRequest.response.429.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.429.detail` (string, required)
- `getDataRequest.response.429.request_id` (string, required)
- `getDataRequest.response.429.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.429.errors` (array<object>, optional)
  - `getDataRequest.response.429.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.429.errors.code` (string, required)
  - `getDataRequest.response.429.errors.detail` (string, required)
- `getDataRequest.response.429.retry_after` (integer | null, optional)

### 500

Something failed at our end. Quote `request_id` when reporting it.

#### Example

```json
{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "code": "string",
  "category": "validation",
  "detail": "string",
  "request_id": "string",
  "errors": [
    {
      "path": "string",
      "code": "string",
      "detail": "string"
    }
  ],
  "retry_after": 0,
  "docs_url": "http://example.com"
}
```

- `getDataRequest.response.500.type` (string, required)
  - format `uri`
- `getDataRequest.response.500.title` (string, required)
- `getDataRequest.response.500.status` (integer, required)
- `getDataRequest.response.500.code` (string, required)
- `getDataRequest.response.500.category` (string, required)
  - one of `"validation"`, `"authentication"`, `"authorization"`, `"not_found"`, `"conflict"`, `"precondition"`, `"quota"`, `"rate_limit"`, `"upstream"`, `"internal"`
- `getDataRequest.response.500.detail` (string, required)
- `getDataRequest.response.500.request_id` (string, required)
- `getDataRequest.response.500.docs_url` (string, required)
  - format `uri`
- `getDataRequest.response.500.errors` (array<object>, optional)
  - `getDataRequest.response.500.errors.path` (string, required) — RFC 6901 JSON Pointer into the request body.
  - `getDataRequest.response.500.errors.code` (string, required)
  - `getDataRequest.response.500.errors.detail` (string, required)
- `getDataRequest.response.500.retry_after` (integer | null, optional)


Source: https://docs.quirelms.com/api/privacy/getDataRequest/index.md