Identity verification, authorized agents, response timelines, and what happens after you submit a privacy request.