Fulfill a GDPR data-subject access request

Reinforce the GDPR Article 15 order from privacy-operations training. The one-month clock runs after identity is verified. The package is not sent until third-party data is redacted.

1. Log the request immediately.
2. Verify the requester's identity through the taught method.
3. Start or resume the one-month clock after identity is confirmed.
4. Search the systems of record listed in the RoPA.
5. Redact other people and privileged material.
6. Provide the copy of the personal data.
7. Provide the Article 15 transparency information.
8. Do not ignore the request because the person is also in a dispute.