The General Data Protection Regulation (GDPR) gives individuals a right to request access to personal information held about themselves.