Data Protection legislation including GDPR entitles data subjects to have access to personal information that is held about them. This policy details the issues that need to be taken into consideration.