Any organisations which process personal data may be subject to a 'subject access' request for personal information held about a data subject. The recipient of a subject access request has to respond quickly but there are often issues around third party personal data and confidential information which may be disclosed in response to a request. There may also be other issues of confidentiality. We help our clients meet their obligations while avoiding disclosure of information or data which should not be disclosed.