Does the company have a written policy or procedure that describes this process?

Please provide a copy of this policy

Does the company obtain consent from individuals or third-parties to use/process their information?

Describe all methods through which the company currently obtains that consent

Which, if any, does the company currently offer to individuals?

Is there currently a process in place to respond to an individual request to access, review, change, copy or delete their personal information?