DSAR deadline calculator
Enter the date a request arrived and the law: get the due date, the extension and the confirm-by date.
Requests and opt-outs
3 tools, 3 guides, 4 comparisons, 1 official list
A request from a person about their own data starts a clock. Under GDPR you answer within one month; under the CCPA within 45 days, and each law allows one extension if you tell the person in time. Opt-out requests, including the browser signal, have their own handling rules.
Here you will find the deadline calculator, a reply template, the plain explanation of a DSAR, the rules on the “Do Not Sell or Share” link, the data protection officer role, and the tools sold to run a request queue.
Tools
Global Privacy Control checker
See whether your browser sends the GPC signal and what a site must do when it does.
DSAR response template
Build the reply to an access request: what you hold, why, who gets it and for how long.
Guides
- What is a DSAR?What a data subject access request is, what you must send back, and the CCPA equivalent.2026-10-23
- The "Do Not Sell or Share" linkWhen a site needs the link, what counts as selling or sharing, and how GPC changes it.2026-10-23
- What is a data protection officer?When GDPR requires a DPO, what the role does, and when an outside DPO fits.2026-10-23
Software compared
Privacy management software
For a firm that needs GDPR and US-state coverage in one place
OneTrust alternatives for smaller firms
For a firm that finds OneTrust more than it needs
Read the comparison: OneTrust alternatives for smaller firms
DSAR tools for a firm without a privacy team
For a firm answering requests by hand today
Read the comparison: DSAR tools for a firm without a privacy team
Outsourced DPO services
For a firm that must name a DPO or an EU representative
Official lists
The other folders
- Consent and cookiesCookie banners, consent records, consent-management platforms and analytics that need (or avoid) consent, under GDPR/ePrivacy and the US opt-out laws.2 tools, 2 guides, 7 comparisons, 1 official list
- Notices and policiesThe paperwork a firm must hold: privacy policy, notice at collection, cookie policy, retention policy, processor contracts, data maps, assessments and the checklists that list them.8 tools, 1 guide, 3 comparisons
- Which laws applyWhether GDPR, the CCPA/CPRA or another state law reaches a firm: thresholds, scope, the state-by-state map and the software sold for each law.2 tools, 13 guides, 2 comparisons