How far can a company go to validate the identity of an individual making a data subject access request?

Does the CCPA exempt businesses from having to disclose privileged communications?

Did California Declare War on Attorney Client Privilege? How the CCPA Impacts Privilege Protections