California Consumer Privacy Act (CCPA) Data Subject Access Request (DSAR) Metrics

The median time to substantively respond to these requests was as follows: Access Requests: 2 days; Delete Requests: 3 days; Do Not Sell My Information Requests: 1 day(s). Requests were rejected or expired due to inability to verify the requestor. Otherwise, all requests were fulfilled, in whole or in part, unless the requestor did not complete the verification process.