SIG Lite
Control DSP-16
Extractive Review Standard
How to answer 'How do you handle data subject access requests (DSARs) under GDPR and CCPA?' on a SIG Lite
Reviewer Guidance & Pitfalls
State the dedicated privacy contact, identity verification procedure, and 30-day response timeline.
Example Answer Passing Enterprise Audit
Compliant Response Template
DSAR requests submitted to privacy@[company].com are verified and fulfilled within 30 days in compliance with GDPR and CCPA (DPA §9).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.