The organization must maintain a structured process for receiving and responding to data subject requests in a timely and compliant manner. Requests should be handled without undue delay and within the defined response period. Where additional time is required due to complexity or multiple requests, a limited extension may be applied, provided the requester is informed and given a clear explanation for the delay.
Appropriate administrative and technical measures must support the process, ensuring accurate identity verification, secure handling of personal data, and proper documentation of all requests and responses to demonstrate compliance.
.svg)
