If a business receives a complex request or has a high volume of requests, it can take a 45-day extension to respond, provided it gives notice to the individual within 45 days of receiving the DSAR.

With three days left before go-live, we consider Subject Access Requests (SARs) under General Data Protection Regulation (GDPR). As always, I am joined in this exploration by Jonathan Armstrong, a ...

Commentary Preparing for Data Subject Access Requests: Navigating Downstream Effects of Layoffs and CPRA Modifications Businesses and their legal departments alike are at risk of being overwhelmed ...