While the EU General Data Protection Regulation is in its second year and the California Consumer Privacy Act quickly approaches, privacy professionals still have a lot of questions about how to properly handle data subject access requests. How much of the process should be automated? Should we privacy pros buy a tool to handle DSARs, or build one internally? Should you hire an intermediary to help handle the requests? Panelists sought to answer these questions and others during a breakout session at the IAPP Privacy. Security. Risk conference in Las Vegas, Nevada. IAPP Associate Editor Ryan Chiavetta, CIPP/US, has the story for The Privacy Advisor.
Full Story