Section 603A.NEW - [Newly enacted section not yet numbered] [Response to request]1. Except as otherwise provided in this section, a regulated entity shall respond to a request made pursuant to section 24 of this act without undue delay and not later than 45 days after authenticating the request. If reasonably necessary based on the complexity and number of requests from the same consumer, the regulated entity may extend the period prescribed by this section not more than an additional 45 days. A regulated entity that grants itself such an extension must, not later than 45 days after authenticating the request, provide the consumer with notice of the extension and the reasons therefor.2. If a regulated entity is not able to authenticate a request made pursuant to section 24 of this act after making commercially reasonable efforts, the regulated entity: (a) Is not required to comply with the request; and(b) May request that the consumer provide such additional information as is reasonably necessary to authenticate the request.3. A regulated entity: (a) Shall provide information free of charge to a consumer in response to:(1) Requests made pursuant to section 24 of this act at least twice each year; and(2) Additional requests that are not manifestly unfounded, excessive or repetitive.(b) Except as otherwise provided in paragraph (a), may charge a reasonable fee to provide information to a consumer in response to requests made pursuant to section 24 of this act that are manifestly unfounded, excessive or repetitive.4. In any civil proceeding challenging the validity of a fee charged pursuant to paragraph (b) of subsection 3, the regulated entity has the burden of demonstrating by a preponderance of the evidence that the request to which the fee pertained was manifestly unfounded, excessive or repetitive.Added by 2023, Ch. 525,§25, eff. 3/31/2024.