Precondition Create a new roles "Privacy officer" and set this role as a DPO for tool dataprivacy Go to Site administration > Users > Permissions > Define roles and click the "Add a new role" button Set Context types where this role may be assigned : System Set allow for moodle/site:configview, and tool/dataprivacy:managedatarequests Map the privacy officer role. Go to Site administation > users > Privacy and policies > Privacy settings: Privacy officer role mapping Also enable Contact the privacy officer Create the following users:  User name Role student Authenticated user privacyofficer Privacy officer   TC1: Check Privacy officer can not request delete another user data without "tool/dataprivacy:requestdeleteforotheruser" capability. Log in as an admin and edit the role for the "Privacy officer" to the permission in the table below. Go to Site administration > Users > Permissions > Define roles and click on the edit icon for the privacy officer. Capability  Permission tool/dataprivacy:requestdeleteforotheruser Prevent Login as "Privacy officer" and navigate to page "Create a new data request" of data privacy tool. Navigate to Site administration > Users > Privacy and policies > Data requests - Click the "new request" button. Check the field "Type" is at value "Export all of my personal data" and we can't change it. Create a new export request, approve the request, run the cron, reload the data requests page and check the status of the request is set to "Download ready".   TC2 : Check Privacy officer can not request delete another user data with "tool/dataprivacy:requestdeleteforotheruser" capability. Log in as an admin and edit the role for the "Privacy officer" to the permission in the table below. Go to Site administration > Users > Permissions > Define roles and click on the edit icon for the privacy officer. Capability  Permission tool/dataprivacy:requestdeleteforotheruser Allow Login as "Privacy officer" and navigate to page "Create a new data request" of data privacy tool. Navigate to Site administration > Users > Privacy and policies > Data requests - Click the "new request" button. Check we can change the value of the "Type" field. Create a new deletion request, approve the request, run the cron, reload the data requests page and check the status of the request is set to "Deleted". TC3: Check student cannot request to delete their own data without "tool/dataprivacy:requestdelete" capability. Log in as an admin and edit the role for the " Authenticated User " to the permission in the table below. Go to Site administration > Users > Permissions > Define roles and click on the edit icon for the Authenticated user . Capability  Permission tool/dataprivacy:requestdelete Prevent Login as a "student" and navigate to the user profile (user menu in the top left > Profile). Check that there is no link under "Privacy and policies" to delete my account. Click the Data requests link. Click New Request. Check the field "Type" is at value "Export all of my personal data" and we can't change it. TC4: Check student can request to delete their own data with "tool/dataprivacy:requestdelete" capability. Log in as an admin and edit the role for the " Authenticated User " to the permission in the table below. Go to Site administration > Users > Permissions > Define roles and click on the edit icon for the Authenticated user . Capability  Permission tool/dataprivacy:requestdelete Allow Login as a "student" and navigate to the user profile (user menu in the top left > Profile). Check that there is a link under "Privacy and policies" to delete my account. Click the Data requests link. Click New Request. Check we can change the value of the "Type" field. Check we can create a "Delete all of my personal data" request. TC5:  Check a parent can create a delete data request for their children when they have the "tool/dataprivacy:makedatarequestsforchildren" capability Create a parent role as per the instructions here . Add the following capability and create the three users in the second table. Capability  Permission  tool/dataprivacy:makedatarequestsforchildren  Allow User  Note parent User with parent role, and having child1 as children child1 Children of parent user. child2 Normal user Add the parent child relationship: Go to the preferences of the potential child [Site administration > Users > Accounts > Browse list of users] and click a users name - In the "Administration section" click Preferences. In the "Roles section" follow "Assign roles relative to this user" - Click Parent and assign the parent. Login as the parent and go to profile page (user menu in the top left > Profile). Under the "Privacy and policies" section follow "Data requests" and click New request. Change the user from the parent to the child. Set the type to "Delete all of my personal data" and submit. Check There is a message under the type select box with "You don't have permission to create deletion requests for this user." Give the parent role the following capability tool/dataprivacy:makedatadeletionrequestforchildren Log back in as the parent. Go back to the profile and make another data request. Try a deletion request on behalf of the child. Check that the request is now submitted.