Many organisations are being swamped with Data Subject Access Requests (DSARs), often produced using generative AI large language models such as ChatGPT. And there is even “The AI Law Firm”(1) to take matters further.

“It is a knotty issue,” says JP Buckley, a partner at law firm Lewis Silkin. Part of the problem, he says, is that responses are being fed back into AI models and training them. In response, specifically tuned AI tools are helping firms deal with both data searches and even generating direct responses.

Alison Deighton, a director and founder at HelloDPO – specialists in data protection and privacy advice, elaborates on a growing problem. “What we have seen with generative AI is a big increase in the number of DSARs many of our clients are receiving. People are going to ChatGPT, or their preferred generative AI model, telling it about their scenario, asking what they should do, and it is telling them to put in a DSAR, and then helpfully saying, I can provide a template, would you like me to do that?”