Data Policy

Read data policy

GET/v4/service/consent/policy/{policyId}

Reads a data policy of the organisation and its latest revision. Give revisionId to get that revision instead. The policy member is always the current policy.

Read data policy

Language of the request sample

curl 'https://demo-api.igrant.io/v4/service/consent/policy/6af080a42d6fb7b6ac6efc54' \
  -H 'Authorization: ApiKey <your-api-key>'

{
  "policy": {
    "id": "6af080a42d6fb7b6ac6efc54",
    "name": "Privacy policy",
    "version": "2.0.0",
    "url": "https://www.example.com/privacy-policy",
    "jurisdiction": "Sweden",
    "industrySector": "Retail",
    "dataRetentionPeriodDays": 730,
    "geographicRestriction": "European Union",
    "storageLocation": "Sweden",
    "thirdPartyDataSharing": false
  },
  "revision": {
    "id": "6af080d32d6fb7b6ac6efc56",
    "schemaName": "Policy",
    "objectId": "6af080a42d6fb7b6ac6efc54",
    "signedWithoutObjectId": false,
    "timestamp": "2026-11-08T14:01:55Z",
    "authorizedByIndividualId": "",
    "authorizedByOther": "6ae2bf74a401855d2806ab5d",
    "predecessorHash": "5172776ed742c08df985f58fcbe3afd641c0f862",
    "predecessorSignature": "",
    "objectData": "{\"id\":\"6af080a42d6fb7b6ac6efc54\",\"name\":\"Privacy policy\",\"version\":\"2.0.0\",\"url\":\"https://www.example.com/privacy-policy\",\"jurisdiction\":\"Sweden\",\"industrySector\":\"Retail\",\"dataRetentionPeriodDays\":730,\"geographicRestriction\":\"European Union\",\"storageLocation\":\"Sweden\"}",
    "successorId": "",
    "serializedHash": "1e6da1a43a88ca5e0524e1d0122a6a75ae0f5733",
    "serializedSnapshot": "{\"schemaName\":\"Policy\",\"objectId\":\"6af080a42d6fb7b6ac6efc54\",\"signedWithoutObjectId\":false,\"timestamp\":\"2026-11-08T14:01:55Z\",\"authorizedByIndividualId\":\"\",\"authorizedByOther\":\"6ae2bf74a401855d2806ab5d\",\"objectData\":\"{\\\"id\\\":\\\"6af080a42d6fb7b6ac6efc54\\\",\\\"name\\\":\\\"Privacy policy\\\",\\\"version\\\":\\\"2.0.0\\\",\\\"url\\\":\\\"https://www.example.com/privacy-policy\\\",\\\"jurisdiction\\\":\\\"Sweden\\\",\\\"industrySector\\\":\\\"Retail\\\",\\\"dataRetentionPeriodDays\\\":730,\\\"geographicRestriction\\\":\\\"European Union\\\",\\\"storageLocation\\\":\\\"Sweden\\\"}\",\"organisationId\":\"\"}",
    "organisationId": "6ae2bf741c3dadfeb27982ec"
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:data-agreements:read

Path parameters

policyIdstringrequired
Policy ID.
Example:"6af080a42d6fb7b6ac6efc54"

Query parameters

revisionIdstring
Revision ID. Give it to get the record as it was at that revision. Without it, the server uses the latest revision.

Response

application/json

The data policy and the revision.

policyobject
A data policy: the privacy policy and the processing rules under which the organisation processes the data. Each update makes a new revision and raises the major version.
revisionobject
One saved version of a record (a data agreement, a policy, a consent record or a data disclosure agreement). Each change makes a new revision. The revision holds the record as JSON and a SHA-1 hash of the snapshot, and it links to the hash of the revision before it, so that you can detect a changed history. Only successorId changes after the server saves a revision.