Yes, your business legally needs to respond to DSARs if you fall under certain data privacy laws, like the CCPA or the GDPR.
Not responding to a DSAR is a form of noncompliance, and your business could face fines or other legal penalties as a result.