Does the company have a written policy or procedure that describes this process?
Please provide a copy of this policy
Does the company obtain consent from individuals or third-parties to use/process their information?
Describe all methods through which the company currently obtains that consent
Which, if any, does the company currently offer to individuals?
Is there currently a process in place to respond to an individual request to access, review, change, copy or delete their personal information?