Does the user have the ability to view all of the data that you store?
Does the user have the ability to update his or her information?
Is the user able to delete a record or unsubscribe from your service?
Is the user able to modify his or her privacy settings?
Is a user's access to his or her information easy and inexpensive?