According to GDPR, users have specific rights designed to protect their personal data. The Right of Access and Data Portability allows them to obtain and transfer their information, while the Right to Be Forgotten ensures they can withdraw consent and request deletion of their data. These provisions help organizations maintain transparency and comply with privacy regulations.
Personal Data Export Requests
Under GDPR, the Right of Access and Data Portability require that individuals can request, receive, and transfer their personal data at any time. Upon request, this data must be provided to them electronically and free of charge.
In BBForms, you can use the Export Data Request template to automatically create a form that allows users to request the export of their data.
BBForms provides the [export_request] bbcode for form Actions, enabling users to submit data export requests. This can be added to the Actions of any form designed for this use.

When a user submits the Export Data Request form (or any form containing this action) the request can be viewed in your WordPress dashboard under Tools -> Export Personal Data. WordPress sends a confirmation email to the provided email address for all new requests.

Personal Data Deletion Requests
For GDPR compliance, the Right to Be Forgotten ensures that users can quickly withdraw consent and request the deletion of their stored data.
BBForms includes the Delete Data Request template, which lets you generate a form automatically for handling data deletion requests.
Also, you can insert the [delete_request] bbcode in BBForms form Actions. It can be implemented in the Actions of any form created for this purpose.

When a user submits the Delete Data Request form (or any form containing this action) the request can be viewed in your WordPress dashboard under Tools ->Delete Data Request. WordPress sends a confirmation email to the provided email address for all new requests.

For further details on GDPR, see GDPR: Make Your Forms GDPR Compliant.