Small survey but still very worrying- adds to anecdotal evidence that organisations still in confusion about "Subject Access Requests" (SAR) nor the extent of personal data in and across the org. Add to that- most organisations cannot access unstructured data and RETRIEVE the relevant data for SARs.

But they have to- end of! From May 25th this year.