Under the Privacy Act, individuals can ask for access to their data. Handling DSARs properly is part of regulatory compliance; failure or delay can exacerbate reputational damage in the wake of a breach. Cyber insurers may factor in the insured’s ability to manage such post-incident obligations in response planning, and some breach response coverage includes support for DSAR fulfilment after data exposures. (insurancebusinessmag.com)