API Reference›Servicing Plane›Privacy requests›List privacy-rights requests

List privacy-rights requests

GEThttps://sandbox.api.lendeasy.ai/v1/servicing/privacy-requestsImplementedBearer token ·READ_SERVICING_PRIVACY_REQUEST

Lists tracked privacy-rights requests with their statutory deadlines, review-task state, and allowed transitions. dueFrom and dueTo bound the statutory deadline and must be supplied together; sort accepts statutoryDueAt, receivedAt, status, or requestType.

Request

curl https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests \
  -H "Authorization: Bearer $TOKEN" \
  -H "LendEasy-Tenant: $TENANT"

await fetch(`https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests`, {
  method: "GET",
  headers: { Authorization: `Bearer ${token}`, "LendEasy-Tenant": tenant },
});

requests.get(
  f"https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests",
  headers={"Authorization": f"Bearer {token}", "LendEasy-Tenant": tenant},
)

{
  "items": [
    {
      "privacyRequestId": 7501,
      "externalRequestRef": "LE-PRIV-7501",
      "customerRef": "123",
      "requestType": "DELETION",
      "regime": "CCPA_CPRA",
      "summary": "Customer requests deletion of personal information.",
      "status": "INTAKE",
      "caseId": 1001,
      "externalCaseRef": "LE-CASE-1001",
      "sourceInteractionId": 3001,
      "reviewTaskId": 3302,
      "reviewTaskAssignedWorkerId": 4101,
      "reviewTaskStatus": "ACCEPTED",
      "receivedAt": "2026-07-25T18: 30:00Z",
      "statutoryDueAt": "2026-09-08T18: 30:00Z",
      "allowedTransitions": [
        "IN_FULFILLMENT",
        "FULFILLED",
        "REJECTED",
        "REFERRED"
      ]
    }
  ],
  "limit": 50,
  "offset": 0,
  "hasMore": false
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "400",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "validation.msg.validation.errors.exist",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "401",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.not.authenticated",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "403",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.not.authorized",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "404",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.resource.not.found",
  "errors": []
}

Path & query parameters

Field	Type	Description
LendEasy-Tenant required in header	string	Opaque active LendEasy tenant-registry identifier. Supply exactly one instance; no alternate tenant selector is accepted.
status optional in query	string	Repeat to include multiple states. One of `INTAKE · IN_FULFILLMENT · FULFILLED · REJECTED · REFERRED`.
requestType optional in query	string	Repeat to include multiple request types. One of `ACCESS · DELETION · CORRECTION · OPT_OUT · OTHER`.
regime optional in query	string	Repeat to include multiple privacy regimes. One of `CCPA_CPRA · OTHER_STATE · FEDERAL`.
customerRef optional in query	string	Exact customer reference.
caseId optional in query	integer	Case the request is linked to.
dueFrom optional in query	string	Inclusive timestamp lower bound.
dueTo optional in query	string	Exclusive timestamp upper bound.
limit optional in query	integer	Maximum rows to return; defaults to 50.
offset optional in query	integer	Zero-based row offset; defaults to 0.
sort optional in query	string	Allowlisted sort field for this collection.
order optional in query	string	Sort direction. One of `asc · desc`.

Request

curl https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests \
  -H "Authorization: Bearer $TOKEN" \
  -H "LendEasy-Tenant: $TENANT"

await fetch(`https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests`, {
  method: "GET",
  headers: { Authorization: `Bearer ${token}`, "LendEasy-Tenant": tenant },
});

requests.get(
  f"https://sandbox.api.lendeasy.ai/v1/servicing/privacy-requests",
  headers={"Authorization": f"Bearer {token}", "LendEasy-Tenant": tenant},
)

{
  "items": [
    {
      "privacyRequestId": 7501,
      "externalRequestRef": "LE-PRIV-7501",
      "customerRef": "123",
      "requestType": "DELETION",
      "regime": "CCPA_CPRA",
      "summary": "Customer requests deletion of personal information.",
      "status": "INTAKE",
      "caseId": 1001,
      "externalCaseRef": "LE-CASE-1001",
      "sourceInteractionId": 3001,
      "reviewTaskId": 3302,
      "reviewTaskAssignedWorkerId": 4101,
      "reviewTaskStatus": "ACCEPTED",
      "receivedAt": "2026-07-25T18: 30:00Z",
      "statutoryDueAt": "2026-09-08T18: 30:00Z",
      "allowedTransitions": [
        "IN_FULFILLMENT",
        "FULFILLED",
        "REJECTED",
        "REFERRED"
      ]
    }
  ],
  "limit": 50,
  "offset": 0,
  "hasMore": false
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "400",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "validation.msg.validation.errors.exist",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "401",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.not.authenticated",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "403",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.not.authorized",
  "errors": []
}

{
  "developerMessage": "Request was understood but rejected; inspect errors for field-level causes.",
  "httpStatusCode": "404",
  "defaultUserMessage": "The request could not be applied.",
  "userMessageGlobalisationCode": "error.msg.resource.not.found",
  "errors": []
}