Companies will have an expanded set of obligations to data subjects in 2023. New laws in Colorado, Connecticut and Virginia, along with new rights for employees in California, have broadened data subject access requests (DSARs). This checklist distills the steps for handling DSARs in the new year and how to adjust for the new requirements, including considerations for employee requests. See “In-House Insight on Handling Data Subject Access Requests Under Multiple Privacy Regimes” (Nov. 10, 2021).