Risk Management Consultant Amy Bell discusses data protection and what firms need to disclose when a client puts a data subject access request into your firm.