The review focused on how to better process verbal data subject requests, how to understand when and which right of access applies, how to be aware of the information the company needs to provide to data subjects, and when the company can refuse a data subject’s request.