Oral requests by a data subject are now permitted.