Subject access requests now cover everything we hold
Published 7 October 2026 by Adrian Angol-Henry · Prompted by internal audit
Live from 07/10/2026. When someone asks for a copy of their data, the export now includes every place we hold information about them, in both the main system and Protect, shown as plain tables. Passwords and other secrets are never included. Each value can be redacted on its own before release, and anything that has to be searched by hand is clearly listed for the person handling the request.