Ready to Register?

MyLawCLE All-Access Pass

Best choice

Add the All-Access Pass and get this program —
plus 1,000+ live CLE programs every year.


All specialty & ethics credits included
38 practice areas
New sections: AI & the Law, Practice Management
100s of current and trending legal topics
Nationally recognized and highly experienced presenters

$395 / year — this program included
Register with the All-Access Pass

This program + 1,000+ CLE programs, all year

Or register for just this program

On-Demand Video

Recorded access + self-study credit.
$195 Register

Data Subject Requests Under the Microscope: Legal Frameworks, Operational Challenges, and Enforcement Risks Attorneys Must Know

Comprehensive guide to handling data subject access requests under U.S. privacy laws, covering legal requirements, response protocols, and compliance strategies.

2025-09-30 13:00:00

Program Details

2025-09-30 13:00:00

Program Details

2025-09-30 13:00:00

Over 1,000+ webinars

2025-09-30 13:00:00

Course Overview

Mastering Data Subject Access Request Compliance

2025-09-30 13:00:00

Participants will learn to build and operationalize DSAR response programs under U.S. consumer data privacy laws. Practical frameworks address verification, timelines, exemptions, and cross-functional coordination.

Format

CLE Credit

2h CLE Credits

Level

Intermediate

Length

2

Key topics that will be covered

01
Legal Framework
Understanding GDPR and CCPA data subject rights and statutory requirements.
02
Response Protocols
Identity verification, processing timelines, and acknowledgment requirements for DSARs.
03
Enforcement Actions
Real-world penalties and regulatory actions for DSAR compliance failures.
04
Workflow Design
Building repeatable, auditable DSAR workflows with automation tools.
05
Data Mapping
Identifying where personal data resides across systems and vendors.
06
Risk Management
Identifying pitfalls, aligning with risk tolerance, and proactive preparation.

Program schedule

clock 1:00 pm - 2:00 pm EST

Understanding Personal Data Rights Under U.S. Privacy Laws

This foundational session explores the statutory data subject rights embedded in state consumer data privacy laws, tracing their evolution from the GDPR to the CCPA and beyond. Attendees will learn the essential steps for acknowledging and processing data subject requests, critical response timelines, and practical strategies for building an effective DSAR compliance program.

Amber ThomsonAmber Thomson
Patrick J. AustinPatrick J. Austin
clock 2:10 pm - 3:10 pm EST

Operationalizing DSAR Compliance and Managing Organizational Risk

This advanced session examines what DSARs truly entail through real-world scenarios, common pitfalls, and recent enforcement actions that highlight regulatory expectations. Participants will gain actionable insights on assessing organizational readiness, designing effective response protocols, and implementing risk management frameworks to ensure sustainable DSAR compliance.

Amber ThomsonAmber Thomson
Patrick J. AustinPatrick J. Austin
Amber Thomson

Amber Thomson

Mayer Brown

Patrick J. Austin

Patrick J. Austin

Woods Rogers Vandeventer Black PLC

Amber Thomson

Amber Thomson

Mayer Brown

Amber Thomson is a partner in Mayer Brown’s Cybersecurity and Privacy practice, advising clients across industries on operationalizing privacy and cybersecurity compliance with deep experience in DSAR response programs, data mapping challenges, and high-risk request management.

Education & Credentials

Certified AI Governance Professional (AIGP) through the IAPP

Professional Involvement

Treasurer for the National Bar Association's Privacy, Cybersecurity and Technology Section

Experience

Helps clients build scalable DSAR response programs, navigate complex data mapping challenges, manage high-risk or sensitive requests, conducts privacy and data security due diligence, and facilitates executive and board training on incident response, privacy legal compliance, and the US cybersecurity and privacy law landscape.
Patrick J. Austin

Patrick J. Austin

Woods Rogers Vandeventer Black PLC

Patrick focuses exclusively on cybersecurity and data privacy issues, helping clients across industries including banking, healthcare, manufacturing, high-tech, and energy navigate complex regulatory compliance issues.

Education & Credentials

Undergraduate degree from Old Dominion University; Law degree from George Mason University School of Law where he served as Editor-in-Chief of the National Security Law Journal

Recognition & Leadership

Designated as a Fellow of Information Privacy (FIP) and a Privacy Law Specialist (PLS) by the IAPP

Experience

Helps clients navigate complex and novel regulatory compliance issues associated with GDPR, CCPA, VCDPA, HIPAA, FOIA, and other information technology laws and frameworks. Certified Information Privacy Professional in both U.S. and European law (CIPP/US & CIPP/E) by IAPP, which is accredited by the American Bar Association.
Amber Thomson

Amber Thomson

Mayer Brown

Amber Thomson is a partner in Mayer Brown’s Cybersecurity and Privacy practice, advising clients across industries on operationalizing privacy and cybersecurity compliance with deep experience in DSAR response programs, data mapping challenges, and high-risk request management.

Education & Credentials

Certified AI Governance Professional (AIGP) through the IAPP

Professional Involvement

Treasurer for the National Bar Association's Privacy, Cybersecurity and Technology Section

Experience

Helps clients build scalable DSAR response programs, navigate complex data mapping challenges, manage high-risk or sensitive requests, conducts privacy and data security due diligence, and facilitates executive and board training on incident response, privacy legal compliance, and the US cybersecurity and privacy law landscape.
Patrick J. Austin

Patrick J. Austin

Woods Rogers Vandeventer Black PLC

Patrick focuses exclusively on cybersecurity and data privacy issues, helping clients across industries including banking, healthcare, manufacturing, high-tech, and energy navigate complex regulatory compliance issues.

Education & Credentials

Undergraduate degree from Old Dominion University; Law degree from George Mason University School of Law where he served as Editor-in-Chief of the National Security Law Journal

Recognition & Leadership

Designated as a Fellow of Information Privacy (FIP) and a Privacy Law Specialist (PLS) by the IAPP

Experience

Helps clients navigate complex and novel regulatory compliance issues associated with GDPR, CCPA, VCDPA, HIPAA, FOIA, and other information technology laws and frameworks. Certified Information Privacy Professional in both U.S. and European law (CIPP/US & CIPP/E) by IAPP, which is accredited by the American Bar Association.

Credits by state

AK2.0
AL2.0
AR2.0
AZ2.0
CA2.0
CO2.0
CT2.0
DC2.0
DE2.0
FL2.0
GA2.0
HI2.0
IA2.0
ID2.0
IL2.0
IN2.0
KS2.0
KY2.0
LA2.0
MA2.0
MD2.0
ME2.0
MI2.0
MN2.0
MO2.4
MS2.0
MT2.0
NC2.0
ND2.0
NE2.0
NH120.0
NJ2.4
NM2.0
NV2.0
NY2.0
OH2.0
OK2.5
OR2.0
PA2.0
RI2.5
SC2.0
SD2.0
TN2.0
TX2.0
UT2.0
VA2.0
VT2.0
WA2.0
WI2.0
WV2.4
WY2.0

Upcoming Live Online CLE Broadcasts

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

10,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

MCLE Credits

Alabama
Pending
Alaska
Approved
Arizona
Approved
Arkansas
Approved
California
Approved
Colorado
Pending
Connecticut
Approved
Delaware
Pending
District of Columbia
No Required
Florida
Approved
Georgia
Approved
Hawaii
Approved
Idaho
Pending
Illinois
Approved
Indiana
Approved
Iowa
Pending
Kansas
Approved
Kentucky
Pending
Louisiana
Pending
Maine
Pending
Maryland
No Required
Massachusetts
No Required
Michigan
No Required
Minnesota
Approved
Mississippi
Pending
Missouri
Approved
Montana
Pending
Nebraska
Pending
Nevada
Pending
New Hampshire
Approved
New Jersey
Approved
New Mexico
Approved
New York
Approved
North Carolina
Pending
North Dakota
Approved
Ohio
Approved
Oklahoma
Pending
Oregon
Pending
Pennsylvania
Approved
Rhode Island
Pending
South Carolina
Pending
South Dakota
No Required
Tennessee
Approved
Texas
Approved
Utah
Pending
Vermont
Approved
Virginia
Not Eligible
Washington
Approved
West Virginia
Pending
Wisconsin
Approved
Wyoming
Pending

Alabama

Requirements

The Alabama State Bar MCLE Commission requires attorneys to complete 12 credits, including 1 ethics, by December 31 of each year. All credits must be reported by February 15 of the following year. A maximum of 12 credits, including 1 ethics credit, may be carried over for 1 year only.  

Formats

  • Attorneys can earn unlimited “live” credit through live seminars, live webcasts, and co-sponsored locations with MyLAWCLE-Alabama approved programs
  • Attorneys are limited to 6 credits per compliance period of “online” programs through MyLAwCLE On-Demand programs