Privacy Request Triage

Coming soon. A consumer or credit-repair company asks you to delete their data. What must you do, and by when?

Triage for privacy requests sent to a collection agency (delete my data, tell me what you have, correct it, do not sell). Checks whether a state privacy law covers you: California CCPA/CPRA and the other state laws, with GLBA entity-level or data-level exemptions and the FCRA exemption for credit report information. Gives the deadlines (45 days plus one 45-day extension; in California, acknowledge within 10 business days and honor opt-outs within 15 business days), identity verification and authorized-agent rules, and what to delete versus keep: records you need to collect the debt, meet a legal duty such as Reg F's 3-year retention (1006.100) or defend a claim (Cal. Civ. Code 1798.105(d)). Flags disputes and stop-contact requests hidden inside the request, and reminds you that your reply is a debt collector communication. Request facts only. Early access pending legal review. Not legal advice.

Status: Coming soon. Pricing is set at launch.

DebtLayer · Tools · Free tools · Docs · support@debtlayer.io