Hugh

I thought it was because some newspapers hadn't put a technical solution in place, whilst lots of others had (I have had the same problem with the LA Times website).

I think GDPR is a good thing - people can't keep or use their data if they don't have a legitimate reason for doing so, and have to delete it if you ask them to.

GDPR is a great reminder to businesses that people lend their information and organisations have a responsibility to look after it. It’s not just about confidentiality, it’s about integrity, accuracy and availability – and it’s just plain good business practice.

If you’re managing customer information in a fit and proper way, then requests for that information – known as subject access requests – are nothing to fear.

If a company has done all the right work, finding and disclosing information for a subject access request will be easy to do.

There needs to be a culture change throughout whole businesses too. Data protection needs to be treated in the same manner as health and safety, and managers need to care about protecting their data as much as they care about protecting their employees.