Regulating the manner in which a controller or a processor in possession of a consumer's personal data may process the consumer's personal data; authorizing a consumer to exercise certain rights in regards to the consumer's personal data; requiring a controller of personal data to establish a method for a consumer to exercise certain rights in regards to the consumer's personal data; requiring a controller to comply with a consumer's request to exercise a certain right in a certain manner, except under certain circumstances; etc.