A data subject has requested the personal data an organization has collected on them. Which of the following should be done FIRST when responding to this reques...