Part 1 of this article looked at the similarities between responding to data subject access requests (DSARs) and the response to litigations and investigations. Part 2 takes a closer look at the operational challenges of responding.

When it comes to data subject access requests (DSARs), there are two contexts to consider: 1) the normal course of business where consumers are exercising their rights, and 2) where there has been a data breach.