Describe the extent to which non-digital PI is maintained by or for you and how you deal with a need to search such records (e.g., discovery requests).

Do you have an online consumer rights portal or other means for consumers to manage their data and consumer rights?

Please explain the current process in place and provide screen shots or wire frames

Please describe the protocol and technical solutions utilized to respond to requests

Is PI retained / deleted in accordance with a data retention policy?

Please explain how. If you do not currently have this capability, explain your plan and schedule for doing so

Are you confident that by January 1, 2020 you will be able to enable consumers to delete their PI (including with vendors), subject to your legal retention rights or obligations?

Are you confident that by January 1, 2020 you will be able to enable consumers to obtain detailed information about your practices regarding their PI?

Are you confident that by January 1, 2020 you will be able to enable consumers to access and copy each and every piece of PI about them under your control (including with vendors)?

Do you have a mechanism in place that offers consumers the ability to review their PI?