Title: Request data access
Last modified: October 21, 2021

---

# Request data access

 *  Resolved [fabio323ti](https://wordpress.org/support/users/fabio323ti/)
 * (@fabio323ti)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/)
 * Hallo, thanks for plugin, but i guess ther’s some mistake…
 * in request-data and forgot request.. you need to put a email address to send 
   request.
    For already logged-in user can email field disabled?
 * Its not safe to put email address in request.. not safe if you know email of 
   other users and risk is to send data to them without real request..
 * any suggestion?

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Support [Bruce](https://wordpress.org/support/users/ninjateamwp/)
 * (@ninjateamwp)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995071)
 * Hi there,
 * Thanks for using Ninja GDPR plugin!
    From what you illustrated, I do not see 
   any unsafe process here, because even logged in users need to specify what Emails
   they need to get messaged to.
 * Also, how can you know the Email of others anyway?
 * If you have further illustrations to butress your explanation, please record 
   a short screencast to better show exactly what you mean so that we can understand
   you properly.
 * Kind regards,
    -Bruce-
 *  Thread Starter [fabio323ti](https://wordpress.org/support/users/fabio323ti/)
 * (@fabio323ti)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995244)
 * Hi Bruce, is not a big matter know other users email, can be a collague, a friend
   o someone you already know…
 * if you are already logged in why put again email field? just a smart button and
   a stupid popup to advice.
 * its complicated?
 *  Plugin Support [Bruce](https://wordpress.org/support/users/ninjateamwp/)
 * (@ninjateamwp)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995391)
 * Hi [@fabio323ti](https://wordpress.org/support/users/fabio323ti/) ,
 * The thing is, that Email field is for anyone o put any of their Emails there,
   it does not necessarily have to be the Email they have logged in with.
 * Also, surely, only anyone with the login credentials to that Email can have access
   to it. So, I do not see any security loopholes.
 * Hope this clarifies!
 * Thank you!
 * Kind regards,
    -Bruce-
 *  Thread Starter [fabio323ti](https://wordpress.org/support/users/fabio323ti/)
 * (@fabio323ti)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995425)
 * Yes you’re right about security but email fieled for logged-in user should be
   hide
    Its does not have any sense if you use in “account page”.
 * if you’re talking about to put shortcode on homepage where anybody can put a 
   email address and request data… this is another pair of shoes.
 * thanks
 *  Plugin Support [Bruce](https://wordpress.org/support/users/ninjateamwp/)
 * (@ninjateamwp)
 * [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995471)
 * Hi [@fabio323ti](https://wordpress.org/support/users/fabio323ti/) ,
 * “email field for logged-in user should be hide
    Its does not have any sense if
   you use in “account page”
 * ==> I think not, because logged-in users might wish to input and use a different
   Email to receive the data notice, and not necessarily their logged in Email or
   perhaps, they have multiple account types registered on the site with different
   Emails.
 * Thank you!
 * Kind regards,
    -Bruce-

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Request data access’ is closed to new replies.

 * ![](https://ps.w.org/ninja-gdpr-compliance/assets/icon-128x128.png?rev=1888171)
 * [GDPR CCPA Compliance & Cookie Consent Banner](https://wordpress.org/plugins/ninja-gdpr-compliance/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninja-gdpr-compliance/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninja-gdpr-compliance/)
 * [Active Topics](https://wordpress.org/support/plugin/ninja-gdpr-compliance/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninja-gdpr-compliance/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninja-gdpr-compliance/reviews/)

 * 5 replies
 * 2 participants
 * Last reply from: [Bruce](https://wordpress.org/support/users/ninjateamwp/)
 * Last activity: [4 years, 7 months ago](https://wordpress.org/support/topic/request-data-access/#post-14995471)
 * Status: resolved