curl --request POST \
--url https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"cpfCnpj": "52998224725",
"legalJustification": "LGPD art. 18 data subject request",
"requestType": "access",
"requesterProtocol": "PROT-2026-0001",
"docType": "cpf"
}
'import requests
url = "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests"
payload = {
"cpfCnpj": "52998224725",
"legalJustification": "LGPD art. 18 data subject request",
"requestType": "access",
"requesterProtocol": "PROT-2026-0001",
"docType": "cpf"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
cpfCnpj: '52998224725',
legalJustification: 'LGPD art. 18 data subject request',
requestType: 'access',
requesterProtocol: 'PROT-2026-0001',
docType: 'cpf'
})
};
fetch('https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'cpfCnpj' => '52998224725',
'legalJustification' => 'LGPD art. 18 data subject request',
'requestType' => 'access',
'requesterProtocol' => 'PROT-2026-0001',
'docType' => 'cpf'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests"
payload := strings.NewReader("{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}"
response = http.request(request)
puts response.read_body{
"id": "11111111-1111-1111-1111-111111111111",
"requesterProtocol": "PROT-2026-0001"
}{
"code": "ERR-0001",
"detail": "Property foo is required but is missing.",
"errors": [
{
"location": "<string>",
"message": "<string>",
"value": "<unknown>"
}
],
"instance": "https://example.com/error-log/abc123",
"status": 400,
"title": "Bad Request",
"type": "https://example.com/errors/example",
"upstream": {
"code": "E4001",
"message": "account not found at provider"
}
}Create an LGPD data-subject request
Creates an LGPD access, portability, or erasure request scoped to the path institution. The acting admin subject is derived from the validated identity; the CPF/CNPJ is tokenized server-side and never echoed.
curl --request POST \
--url https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"cpfCnpj": "52998224725",
"legalJustification": "LGPD art. 18 data subject request",
"requestType": "access",
"requesterProtocol": "PROT-2026-0001",
"docType": "cpf"
}
'import requests
url = "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests"
payload = {
"cpfCnpj": "52998224725",
"legalJustification": "LGPD art. 18 data subject request",
"requestType": "access",
"requesterProtocol": "PROT-2026-0001",
"docType": "cpf"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
cpfCnpj: '52998224725',
legalJustification: 'LGPD art. 18 data subject request',
requestType: 'access',
requesterProtocol: 'PROT-2026-0001',
docType: 'cpf'
})
};
fetch('https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'cpfCnpj' => '52998224725',
'legalJustification' => 'LGPD art. 18 data subject request',
'requestType' => 'access',
'requesterProtocol' => 'PROT-2026-0001',
'docType' => 'cpf'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests"
payload := strings.NewReader("{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sisbajud.sandbox.lerian.net/institutions/{institutionId}/lgpd/requests")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"cpfCnpj\": \"52998224725\",\n \"legalJustification\": \"LGPD art. 18 data subject request\",\n \"requestType\": \"access\",\n \"requesterProtocol\": \"PROT-2026-0001\",\n \"docType\": \"cpf\"\n}"
response = http.request(request)
puts response.read_body{
"id": "11111111-1111-1111-1111-111111111111",
"requesterProtocol": "PROT-2026-0001"
}{
"code": "ERR-0001",
"detail": "Property foo is required but is missing.",
"errors": [
{
"location": "<string>",
"message": "<string>",
"value": "<unknown>"
}
],
"instance": "https://example.com/error-log/abc123",
"status": 400,
"title": "Bad Request",
"type": "https://example.com/errors/example",
"upstream": {
"code": "E4001",
"message": "account not found at provider"
}
}Authorizations
JWT bearer token issued by the identity provider.
Path Parameters
The institution's unique identifier (UUID) the LGPD request is scoped to.
"44444444-4444-4444-4444-444444444444"
Body
The data subject's cleartext CPF or CNPJ (tokenized server-side; never echoed nor logged).
"52998224725"
The legal basis for the request (sealed verbatim into the audit payload).
"LGPD art. 18 data subject request"
The LGPD request type (e.g. access, portability, erasure).
"access"
The caller-supplied protocol identifier for correlation.
"PROT-2026-0001"
The document type (cpf or cnpj); inferred from the subject value when omitted.
"cpf"
Was this page helpful?

