Handle a data subject access request
Data steward and data holder (federated data, purpose views): Handle a data subject access request. Starts when: Request received. Steps: Open request; Verify identity; Compile data; Respond within one month; Record. Done when: The request shows response within one month with a receipt. Rules that apply: UK GDPR Article 15.