Under the General Data Protection Regulations (GDPR), individuals have 8 rights regarding any personal data that any organisation holds about them.
As a company, an individual might contact you looking to exercise one of these rights and you must respond to it legally, quickly, and efficiently.