Provide people with access to their data through the secure data portal.
Allow people to self-serve data requests in a controlled and documented way.
GDPR expands and extends the rights of individuals over their data from those previously set out in the UK’s Data Protection Act. Making sure that you are able to meet these rights and requests is a fundamental element of GDPR.
The relevant GDPR articles: