Richieste GDPR per settore

Your employer is a data controller under GDPR and must respond to a Subject Access Request just like any other organisation. Employment relationships often involve extensive data collection — some of which you may not be aware of.

Banks and financial institutions hold some of the most sensitive personal data about you, including detailed financial history, credit assessments, and identity documents. GDPR gives you the right to see all of it.

Medical and health data is classified as 'special category data' under Article 9 GDPR, meaning it receives stronger protections. You have the right to access all records your healthcare provider holds about you.

Insurance companies build detailed profiles to assess risk and price policies. This data often includes information from third parties — such as previous insurers, databases, and credit agencies — that you may never have seen.

Telecoms providers hold extensive data about your communications and movements. Location data from mobile networks in particular can reveal detailed patterns about your daily life.

Dating apps hold some of the most sensitive personal data imaginable — your location history, private messages, and detailed behavioural profiles built from every swipe. Some data, such as inferred sexual orientation, is special category data under Article 9 GDPR and attracts the highest level of protection.

Credit reference agencies — Experian, Equifax, and TransUnion in the UK — hold detailed financial profiles used by lenders, landlords, and employers to assess your creditworthiness. Errors in these files can affect mortgage applications, mobile phone contracts, and insurance premiums.

Loyalty schemes and retailers build detailed consumer profiles from your purchase history, location visits, and app behaviour. This data is often used for targeted advertising and shared with data brokers and marketing partners — sometimes without your awareness.