What Information Should Be Included in the Response?
When responding to a data access request, include the following information:
Details of the personal data you hold. The purposes for which the data is being processed. Any third parties with whom the data has been shared. The source of the data if it was not collected directly from the individual. The retention period for storing the data.