Checklist for processing subject access requests